Файловый менеджер - Редактировать - /usr/lib/python3/dist-packages/uaclient/api/u/pro/security/cves/_common/__pycache__/v1.cpython-310.pyc
Ðазад
o μg�L � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dl m Z m Z m Z m Z mZ d dlmZ d dlmZmZmZmZmZ d dlmZ d dlmZ d d lm Z d d l m Z m Z m Z m!Z! d d l"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z( d d l)m*Z*m+Z+ d d l,m-Z- d dl.m/Z/ G dd� de �Z0G dd� de �Z1ej2G dd� dej3��Z4G dd� d�Z5de e e6ee6 f de4fdd�Z7e dd eej fd e e6e e6e f f fg�Z8G d d � d �Z9G d d!� d!e j:d"�Z;G d#d$� d$�Z<d%e;d&e d'ee6 fd(d)�Z=dS )*� N)� defaultdict)� lru_cache)�Any�Dict�List� NamedTuple�Optional)�urljoin)�apt� exceptions�http�system�util)�#query_installed_source_pkg_versions)�_enabled_services)�UAConfig)� DataObject�Field�FloatDataValue�StringDataValue)�VULNERABILITY_CACHE_PATH�VULNERABILITY_DATA_CACHE�VULNERABILITY_DATA_TMPL�$VULNERABILITY_DPKG_STATUS_DATE_CACHE�VULNERABILITY_ETAG_CACHE�VULNERABILITY_RESULT_CACHE)�FIPSEntitlement�FIPSUpdatesEntitlement)�DataObjectFile)�UAFilec @ s e Zd Zede�gZdd� ZdS )�VulnerabilityCacheETag�etagc C � || _ d S �N�r! )�selfr! � r& �M/usr/lib/python3/dist-packages/uaclient/api/u/pro/security/cves/_common/v1.py�__init__' � z VulnerabilityCacheETag.__init__N)�__name__� __module__� __qualname__r r �fieldsr( r& r& r& r' r $ s r c @ s& e Zd Zede�gZdefdd�ZdS )�VulnerabilityDpkgCacheDate�dpkg_status_datec C r" r# �r/ )r% r/ r& r& r' r( . r) z#VulnerabilityDpkgCacheDate.__init__N)r* r+ r, r r r- �floatr( r& r& r& r' r. + s r. c @ s e Zd ZdZdZdZdZdS )�VulnerabilityStatusz< An enum to represent the status of a vulnerability �no�partial�yesN)r* r+ r, �__doc__�NO_FIX_AVAILABLE�PARTIAL_FIX_AVAILABLE�FULL_FIX_AVAILABLEr& r& r& r' r2 2 s r2 c @ s� e Zd Z d dedee fdd�Zedd� �Zdd � Z d d � Z d e ee f fd d�Z dedefdd�Zdd� Zdd� Zdd� Zdd� Zdd � ZdS ) �VulnerabilityDataN�cfg�seriesc C s& || _ |p t�� j| _d | _d| _d S )NF)r; r �get_release_infor< �_etag� _refreshed)r% r; r< r& r& r' r( ? s zVulnerabilityData.__init__c C s | j S r# )r? �r% r& r& r' � refreshedI s zVulnerabilityData.refreshedc C s t j�t| jt�S r# )�os�path�joinr r< r r@ r& r& r' �_get_cache_data_pathM s �z&VulnerabilityData._get_cache_data_pathc C s" t ttttj�t| j�dd�d�S �NF)�name� directory�private)�data_object_cls�ua_file) r r r r rB rC rD r r< r@ r& r& r' �_get_etag_cache_fileR s ��z&VulnerabilityData._get_etag_cache_file� json_datac C s t �| �� t�|�� d S r# )r � write_filerE �json�dumps)r% rM r& r& r' �_save_cache_data\ s z"VulnerabilityData._save_cache_data�cache_etag_filer! c C s |� t|d�� d S )Nr$ )�writer )r% rR r! r& r& r' �_save_etag_cache_ � z"VulnerabilityData._save_etag_cachec C s( | j s| �� }|�� }|r|j| _ | j S r# )r> rL �readr! )r% � etag_file� etag_datar& r& r' � _get_etagb s zVulnerabilityData._get_etagc C � t �t�| �� ��S r# )rO �loadsr � load_filerE r@ r& r& r' �_get_cache_datal rU z!VulnerabilityData._get_cache_datac C sd | j }dd� t| j�jD �}tj|v rd�| j �}n tj|v r%d�| j �}tj|d�}t | jj |�S )Nc S s g | ]}|j �qS r& )rG )�.0�sr& r& r' � <listcomp>r s �z3VulnerabilityData._get_data_url.<locals>.<listcomp>zfips_{}zfips-updates_{})r< ) r< r r; �enabled_servicesr rG �formatr r r � vulnerability_data_url_prefix)r% � data_name�enabled_services_names� data_filer& r& r' � _get_data_urlo s � z VulnerabilityData._get_data_urlc C s | � � }|d S )N� published_at)�get)r% �vulnerability_json_datar& r& r' �get_published_date} s z$VulnerabilityData.get_published_datec C s� | � � }ztj| j| �� |d�\}}d| _W n tjy$ | �� Y S w t � |� d��}t � � r@| �|� |r@| �| �� |� |S )N)r; �urlr! Tzutf-8)rY r �download_xz_file_from_urlr; rg r? r � ETagUnchangedr] rO r[ �decoder �we_are_currently_rootrQ rT rL )r% � last_etag�datar! rM r& r& r' ri � s � � zVulnerabilityData.getr# )r* r+ r, r r �strr( �propertyrA rE rL r r rQ r rT rY r] rg rk ri r& r& r& r' r: = s$ �� � r: �affected_packages�returnc C sR t j}d}| D ] }|�d�d ur|d7 }q|t| �kr t j}|S |dkr't j}|S )Nr � fix_version� )r2 r7 ri �lenr9 r8 )ru �vulnerability_status� num_fixes�pkgr& r& r' � _get_vulnerability_fix_status� s � �r} �VulnerabilityParserResult� vulnerability_data_published_at�vulnerabilities_infoc @ s: e Zd Zdd� Z d dededee fdd�Zd d � ZdS ) �VulnerabilitiesAlreadyFixedc C s t t�| _t dd� �| _d S )Nc S s t t�S r# )r �intr& r& r& r' �<lambda>� � z6VulnerabilitiesAlreadyFixed.__init__.<locals>.<lambda>)r �set�_vulns�priority_counterr@ r& r& r' r( � s �z$VulnerabilitiesAlreadyFixed.__init__N� vuln_name� vuln_pocket� vuln_priorityc C sD || j | vr | j | �|� |r | j| | d7 < d S d S d S )Nrx )r� �addr� )r% r� r� r� r& r& r' �add_vulnerability� s �z-VulnerabilitiesAlreadyFixed.add_vulnerabilityc C sH i i d�}| j �� D ]\}}t|�|d |< t| j| �|d |< q |S )N)�count�infor� r� )r� �itemsry �dictr� )r% � dict_repr�pocket�vulnsr& r& r' �to_dict� s �z#VulnerabilitiesAlreadyFixed.to_dictr# )r* r+ r, r( rs r r� r� r& r& r& r' r� � s ��� � r� c @ s� e Zd ZdZejdeeef deeef fdd��Z ejdeeef deeef deeef fdd ��Z d eeef d ed ed efdd�Z d eeef d ed ed edef dd�Z d eeef d ed ed edededefdd�Z d edeeef deeef deeef fdd�Zd edefd d �Zedd �d efd!d"��Zdee d ed efd#d$�Zd%edefd&d'�Zd(eeef fd)d*�Zdeeef d(eeeeef f fd+d,�ZdS )-�VulnerabilityParserN� affected_pkgrv c C � d S r# r& )r% r� r& r& r' �get_package_vulnerabilities� s z/VulnerabilityParser.get_package_vulnerabilities�vulnerability_info�vulnerabilities_datac C r� r# r& )r% r� r� r& r& r' � _post_process_vulnerability_info� s z4VulnerabilityParser._post_process_vulnerability_info�packages� bin_pkg_name�bin_pkg_versionr� c C s d|| j g i||< d S )N�current_version)�vulnerability_type)r% r� r� r� r� r& r& r' �_add_new_vulnerability� s �z*VulnerabilityParser._add_new_vulnerability�vuln_pkg_statusc C s< ||vr | j ||||d� || | j �|d |d d�� d S �N)r� r� r� r� )rG rw � fix_status� fix_origin�r� r� �append)r% r� r� r� r� r� r& r& r' � _add_unfixable_vulnerability� s ���z0VulnerabilityParser._add_unfixable_vulnerability�vuln_bin_fix_versionr� c C s< ||vr | j ||||d� || | j �||||d�� d S r� r� )r% r� r� r� r� r� r� r� r& r& r' �_add_fixable_vulnerability s ���z.VulnerabilityParser._add_fixable_vulnerability�vulnerabilities� vuln_info� vulns_datac C s" ||vr| j ||d�||< d S d S )N)r� r� )r� )r% r� r� r� r� r& r& r' �_add_vulnerability_info s ��z+VulnerabilityParser._add_vulnerability_info�vuln_source_fixed_versionc C s |d u r |dkr dS dS )Nznot-vulnerableTFr& )r% r� r� r& r& r' � is_vulnerability_not_fixable- s z0VulnerabilityParser.is_vulnerability_not_fixable)�maxsize�binary_pkg_namec C s t �ddd|g�\}}|S )Nz dpkg-queryz-Wz-f=${source:Version})r �subp)r% r� �out�_r& r& r' �!_get_installed_source_pkg_version; s �� z5VulnerabilityParser._get_installed_source_pkg_versionc C s. |du r| � |�}t�||�dkrdS dS dS )aZ This method checks if we can detect that a vulnerability affects a binary package but can't be fixed. This situation can happen during a package transition. For example, suppose we have this entry for pkg1: "pkg1": { "source_version": { "1.0": { "bin-pkg1": "1.0", "bin-pkg2": "1.1", }, "1.1": { "bin-pkg1": "1.2" } } } Notice that version 1.1 doesn't produce bin-pkg2 anymore. Therefore, if we detect that a vulnerability is fixable by version 1.1, we won't find the binary fixable bersion for the bin-pkg2 package. If we detect that, we will: 1. Check if versions of the source package associated with the binary package is higher than the vulnerability source fix version. If it is, we can say that the system is not vulnerable. 2. If it is not, then the binary package is affected by the issue, but we can't say what the user needs to do to fix it. Nr FT)r� r �version_compare)r% r� r� r� � installed_source_pkg_versionr& r& r' �&is_vulnerability_valid_but_not_fixableH s '���z:VulnerabilityParser.is_vulnerability_valid_but_not_fixable� bin_versionc C s t �||�dkS �Nr )r r� )r% r� r� r& r& r' � vulnerability_affects_system� s z0VulnerabilityParser.vulnerability_affects_system�installed_pkgs_by_sourcec c s: � |� � D ]\}}t|� � �D ] \}}|||fV qqd S r# )r� �sorted)r% r� � source_pkg� binary_pkgsr� �binary_installed_versionr& r& r' �_list_binary_packages� s � ���z)VulnerabilityParser._list_binary_packagesc C s� i }i }|� di �}|� di �� | ji �}| �|�D ]�\}}} |� |i �} | � di �} t| �| ��� dd� d�D ]�\} } |� | d�}| � d�}| � d �}| j||d �rg| j||| | |d � | j| |||d � q8z| | � d �}| | � di �� |�}W n t y� Y q8w | � |||�r�| j||| | dd � | j| |||d � |d u r�q8| � | |�r�| j ||| | |||d� | j| |||d � q8qt |� d�||d�d�S )Nr� �security_issues�source_versionsc S s | d S r� r& )�xr& r& r' r� � r� zLVulnerabilityParser.get_vulnerabilities_for_installed_pkgs.<locals>.<lambda>)�key� �source_fixed_version�status)r� r� )r� r� r� r� r� )r� r� r� r� r� �binary_packages�unknown)r� r� r� r� r� r� r� rh )r� r� �r r� )ri r� r� r� r� r� r� r� r� �KeyErrorr� r� r� r~ )r% r� r� r� r� � affected_pkgs� vulns_infor� r� r� r� �vuln_source_versionsr� �vulnr� r� r� r� r� r& r& r' �&get_vulnerabilities_for_installed_pkgs� s� �� � ������ ������ ���T���z:VulnerabilityParser.get_vulnerabilities_for_installed_pkgs)r* r+ r, r� �abc�abstractmethodr rs r r� r� r� r� r� r� r� r r� r r� r� r� r� r& r& r& r' r� � s� � � � � � ��� � ���� � ������ �� � � � � � �� �8� � ��r� )� metaclassc @ sj e Zd Zddedee fdd�Zdd� Zdeeef fd d �Z d d � Z d d� Z dd� Z dd� Z dd� ZdS )�VulnerabilityResultCacheNr� r< c C s2 |pt �� j| _|| _tttttdd�d�| _ d S rF ) r r= r< r� r r. r r r �dpkg_status_cache)r% r� r< r& r& r' r( s � �z!VulnerabilityResultCache.__init__c C s t j�t| j| jt�S r# )rB rC rD r r< r� r r@ r& r& r' �_get_result_cache_path s �z/VulnerabilityResultCache._get_result_cache_path�vulnerability_datac C sD t �� r t�� p d}| j�t|d�� t�| � � t � |�� d S d S )Nr r0 ) r rp r �get_dpkg_status_timer� rS r. r rN r� rO rP )r% r� �latest_dpkg_status_timer& r& r' �save_result_cache s ����z*VulnerabilityResultCache.save_result_cachec C s( t �� pd}| j�� }|sdS ||jkS )Nr T)r r� r� rV r/ )r% r� �dpkg_status_cache_objr& r& r' �_has_apt_state_changed& s z/VulnerabilityResultCache._has_apt_state_changedc C s t j�| �� �S r# )rB rC �existsr� r@ r& r& r' �_cache_result_exists. s z-VulnerabilityResultCache._cache_result_existsc C s | � � sdS | �� r dS dS )NFT)r� r� r@ r& r& r' �_is_cache_result_valid1 s z/VulnerabilityResultCache._is_cache_result_validc C s | � � S r# )r� r@ r& r& r' �is_cache_valid: s z'VulnerabilityResultCache.is_cache_validc C rZ r# )rO r[ r r\ r� r@ r& r& r' �get_result_cache= rU z)VulnerabilityResultCache.get_result_cacher# )r* r+ r, rs r r( r� r r r� r� r� r� r� r� r& r& r& r' r� s r� �parserr; r< c C sh t ||d�}t|| jd�}|�� }|js"|�� r"t|�� |�� d�S t � }| j ||d�}|� |j � |S )N)r; r< )r< r� r� )r� r� ) r: r� r� ri rA r� r~ rk r� r r� r� r� )r� r; r< r� �vulnerabilities_result�vulnerabilities_json_datar� � vulnerabilities_parser_resultr& r& r' �get_vulnerabilitiesA s2 ������r� )>r� �datetime�enumrO rB � collectionsr � functoolsr �typingr r r r r � urllib.parser �uaclientr r r r r �'uaclient.api.u.pro.security.fix._commonr �-uaclient.api.u.pro.status.enabled_services.v1r �uaclient.configr �uaclient.data_typesr r r r �uaclient.defaultsr r r r r r �uaclient.entitlements.fipsr r �uaclient.files.data_typesr �uaclient.files.filesr r r. �unique�Enumr2 r: rs r} r~ r� �ABCMetar� r� r� r& r& r& r' �<module> s\ Y� � �� 6>���
| ver. 1.1 | |
.
| PHP 8.4.18 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка