/usr/lib/python3/dist-packages/uaclient/api/u/pro/security/cves/__pycache__
Edit: /usr/lib/python3/dist-packages/uaclient/api/u/pro/security/cves/__pycache__/v1.cpython-310.pyc (9314B)
o
Ki- @ s d dl Z d dlmZmZmZmZ d dlmZmZ d dl m
Z
d dl m Z d dl
mZmZ d dlmZ d dlmZ d d lmZmZmZmZmZmZmZm Z G d
d d eZ G d d
d
eZ G dd deZ G dd deZ G dd deZ!G dd dee Z"G dd deZ#de$fddZ%de de"fd d Z&de d ee'ef d e'de"fd d!Z(de d"ede"fd#d$Z)e
d%d&e)e d'Z*d(d)d*e"egg d+d,d-Z+dS ). N)AnyDictListOptional)systemutil) APIEndpoint)AdditionalInfo)VulnerabilityParserget_vulnerabilities)get_apt_cache_datetime)UAConfig)
BoolDataValue
DataObjectDatetimeDataValueFieldFloatDataValueStringDataValue data_dict data_listc @ sN e Zd ZededddededddgZddddee dee fdd Zd
S ) CVEsOptions unfixableFzShow only unfixable CVES.docfixablezShow only fixable CVES.r r c C || _ || _d S Nr )selfr r r E/usr/lib/python3/dist-packages/uaclient/api/u/pro/security/cves/v1.py__init__) s
zCVEsOptions.__init__N) __name__
__module__ __qualname__r r fieldsr boolr! r r r r r s* r c @ s` e Zd Zededddededddededdded ed
dgZdededed efd d Zd
S )CVEAffectedPackagenameFz The CVE namer fix_versionz.The version that fixes the CVE for the package
fix_statusz)The status of the CVE fix for the package
fix_originz*The pocket where the fix is available fromc C || _ || _|| _|| _d S r r( r) r* r+ )r r( r) r* r+ r r r r! N s
zCVEAffectedPackage.__init__Nr" r# r$ r r r% strr! r r r r r' 3 sD r' c @ sB e Zd ZededdedeeddgZdede e fddZ
dS ) AffectedPackagecurrent_versionz"The current version of the packager cvesz The CVE that affects the packagec C r r r1 r2 )r r1 r2 r r r r! e s
zAffectedPackage.__init__N) r" r# r$ r r r r' r% r/ r r! r r r r r0 W s"
r0 c @ s: e Zd ZededdededdgZdedefddZdS )
RelatedUSNr( z The USN namer titlez
The USN titlec C r r r( r5 )r r( r5 r r r r! z s
zRelatedUSN.__init__Nr. r r r r r4 l s
r4 c @ s e Zd Zededdededdededdedeed d
ded ed d ded
ed ddgZddddddde de
j
de de e e d e e
d
e e de e e de e e fddZdS )CVEInfo descriptionzThe CVE descriptionr published_atzThe CVE published datepriorityz The ubuntu priority for the CVEnotesFzA list of notes for the CVE
cvss_scorezThe CVE cvss score
cvss_severityzThe CVE cvss severityN)r; r< r= related_usnsrelated_packagesr> r? c C s4 || _ || _|| _|| _|| _|| _|| _|| _d S r r8 r9 r: r; r< r= r> r? ) r r8 r9 r: r; r< r= r> r? r r r r! s
zCVEInfo.__init__)r" r# r$ r r r r r r% r/ datetimer r floatr4 r! r r r r r7 sr *
r7 c
@ sl e Zd ZedeedddedeedddgZdddee ef dee ef d e
j
d
e e
j
fd d Z dS )
CVEsResultpackages) value_clszcA dictionary where the keys are installed package names and the values are AffectedPackage objects.r r2 zMA dictionary where the keys are CVE names and the values are CVEInfo objects.N)apt_updated_at vulnerability_data_published_atrF c C r, r rD r2 rG rF )r rD r2 rG rF r r r r! s
zCVEsResult.__init__)
r" r# r$ r r r0 r7 r% r r/ rA r r! r r r r rC s,
rC c @ s` e Zd ZdZdeeef deeef fddZdeeef deeef deeef fdd Zd
S ) CVEParserr2 affected_pkgreturnc C s | | ji S r )getvulnerability_type)r rJ r r r get_package_vulnerabilities s z%CVEParser.get_package_vulnerabilitiesvulnerability_infovulnerabilities_datac C s\ | dr,g }| di di }|d D ]}||| |i ddd q||d< |S )Nr> security_issuesusnsr5 r6 )rL append)r rO rP r> usn_info related_usnr r r _post_process_vulnerability_info s
z*CVEParser._post_process_vulnerability_infoN) r" r# r$ rM r r/ r rN rW r r r r rI s
rI rK c C s4 | do | d}|jr|rdS |jr|sdS dS )Nr) r+ FT)rL r r )cveoptions
is_fixabler r r cve_status_match_options s
r[ rY c C s t | t S r )_cvesr
)rY r r r r2 s r2 vulnerabilitiesrG c
s i }t t|di D ]@\}}g }t|dg dd dD ]!}t|| rB|t|d |d |d |d d
|d q!|rOt|d |d ||< q fd
dt|di dd dD }t ||t
|t dS )NrD r2 c S | d S )Nr( r )rX r r r
z(_parse_vulnerabilities..)keyr( r) r* r+ r- r1 r3 c sj i | ]1\}}| v r|t |d t|d |d |d |d |d dd |dg D |d g d
qS ) r8 r9 ubuntu_priorityr; r< r= c S s( g | ]}t |d d|dddqS )r( rS r5 r6 )r4 rL ).0rV r r r
6 s
z5_parse_vulnerabilities...r> r? r@ )r7 r parse_rfc3339_daterL )rc cve_namerX allowed_cvesr r
. s
z*_parse_vulnerabilities..r] c S r^ )Nr r )vr r r r_ A r` rH )
setsortedrL itemsr[ rT r' addr0 rC r re r ) rY r] rG rD pkg_name package_infopkg_cvesrX r2 r rg r _parse_vulnerabilities sP
rr cfgc C sH | j r | jr d| _ d| _t j}tt ||d}|j}t| ||j dS )z
This endpoint shows the CVE vulnerabilities in the system.
By default, this API will show all CVEs that affect the system.
F)parserrs series)rY r] rG )
r r r get_release_inforu r rI vulnerabilities_inforr rG )rY rs ru cve_vulnerabilities_resultcve_vulnerabilitiesr r r r\ P s
r\ v1CVEs)versionr( fn options_cls35Tzs
from uaclient.api.u.pro.security.cves.v1 import cves, CVEsOptions
options = CVEsOptions()
result = cves(options)
z pro api u.pro.security.cves.v1a
{
"cves": {
"CVE-2023-5678": {
"cvss_score": 8.1,
"cvss_severity": "high",
"description": "description example",
"notes": [
"note example",
],
"priority": "medium",
"published_at": ".*"
}
},
"packages": {
"accountsservice": {
"current_version": "0.6.40-2ubuntu11.6",
"cves": [
{
"fix_origin": "esm-infra",
"fix_status": "fixed",
"fix_version": "0.6.40-2ubuntu11.6+esm1",
"name": "CVE-2023-5678"
}
]
},
"libaccountsservice0": {
"current_version": "0.6.40-2ubuntu11.6",
"cves": [
{
"fix_origin": "esm-infra",
"fix_status": "fixed",
"fix_version": "0.6.40-2ubuntu11.6+esm1",
"name": "CVE-2023-5678"
}
]
}
},
}
)
introduced_inrequires_networkexample_python result_classignore_result_classes
exceptions example_cli example_json),rA typingr r r r uaclientr r uaclient.api.apir uaclient.api.data_typesr +uaclient.api.u.pro.security.cves._common.v1r
r uaclient.aptr uaclient.configr
uaclient.data_typesr r r r r r r r r r' r0 r4 r7 rC rI r& r[ r2 r/ rr r\ endpoint_docr r r r sj ( $> #
A