File: //lib/python3/dist-packages/uaclient/api/u/pro/security/fix/__pycache__/__init__.cpython-310.pyc
o
nHJe�p � @ s� d dl Z d dlZd dlmZ d dlmZmZmZmZm Z m
Z
d dl m Z m
Z
mZ d dlmZ d dlmZ d dlmZ d dlmZmZ d d lmZmZmZm Z m Z d d
l m Z m Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z, d Z-d Z.d
Z/edde0fde0fde e0 fg�Z1e j2G dd� de j3��Z4e j2G dd� de j3��Z5e j2G dd� de j3��Z6e j2G dd� de j3��Z7G dd� de�Z8G d d � d e�Z9G d d � d e8�Z:G d d!� d!e�Z;G d"d#� d#e8�Z<G d$d%� d%e�Z=G d&d'� d'e8�Z>G d(d)� d)e�Z?G d*d+� d+e8�Z@G d,d-� d-e?�ZAG d.d/� d/e@�ZBG d0d1� d1e?�ZCG d2d3� d3e@�ZDG d4d5� d5e�ZEG d6d7� d7e�ZFG d8d9� d9eE�ZGG d:d;� d;e�ZHG d<d=� d=eE�ZIG d>d?� d?e�ZJG d@dA� dAe�ZKG dBdC� dCeK�ZLG dDdE� dEe�ZMG dFdG� dGe�ZNG dHdI� dI�ZOG dJdK� dKeO�ZP dqdLe0dMe e0 dNe ee0 fdOdP�ZQdQe0dRe%dSe
e ee! f fdTdU�ZRdQe0dRe%dSe
e!ee! f fdVdW�ZSdXee" dYe0dSe
ee0 ee1 f fdZd[�ZTd\ee
e0e#f d]ee0ee0ee0e0f f f d^ee0ee0e0f f fd_d`�ZUdQe0daedSeMfdbdc�ZVdQe0daedSeNfddde�ZWdQe0daedSeMfdfdg�ZXdQe0daedSeNfdhdi�ZYdYe0fdjdk�ZZddl�dQe0dme0dnee0e#f d]ee0ee0ee0e0f f f d^ee0ee0e0f f daedSeMfdodp�Z[dS )r� N)� defaultdict)�Any�Dict�List�
NamedTuple�Optional�Tuple)�apt�
exceptions�messages)�_enabled_services)� _is_attached)�UAConfig)�ContractExpiryStatus�get_contract_expiry_status)�
DataObject�Field� IntDataValue�StringDataValue� data_list)�CVE�CVE_OR_USN_REGEX�USN�BinaryPackageFix�CVEPackageStatus� FixStatus�UASecurityClient� _check_cve_fixed_by_livepatch� get_affected_packages_from_usn�'get_cve_affected_source_packages_status�get_related_usns�group_by_usn_package_status�*merge_usn_released_binary_package_versions�#query_installed_source_pkg_versionszstandard-updates� esm-infra�esm-apps�UnfixedPackage�source_package�binary_package�versionc @ s e Zd ZdZdZdZdZdS )� FixStepType�attach�enablezno-opz apt-upgradeN)�__name__�
__module__� __qualname__�ATTACH�ENABLE�NOOP� APT_UPGRADE� r4 r4 �J/usr/lib/python3/dist-packages/uaclient/api/u/pro/security/fix/__init__.pyr* 1 s
r* c @ s e Zd ZdZdZdZdS )�FixPlanNoOpStatuszcve-already-fixed�system-not-affectedzcve-fixed-by-livepatchN)r- r. r/ �
ALREADY_FIXED� NOT_AFFECTED�FIXED_BY_LIVEPATCHr4 r4 r4 r5 r6 9 s r6 c @ � e Zd ZdZdZdS )�FixPlanAttachReasonzexpired-contract-token�required-pro-serviceN)r- r. r/ �EXPIRED_CONTRACT�REQUIRED_PRO_SERVICEr4 r4 r4 r5 r< @ � r< c @ r; )�FixWarningTypezpackage-cannot-be-installedzsecurity-issue-not-fixedN)r- r. r/ �PACKAGE_CANNOT_BE_INSTALLED�SECURITY_ISSUE_NOT_FIXEDr4 r4 r4 r5 rA F r@ rA c @ �2 e Zd Zede�ede�gZdedefdd�Z dS )� FixPlanStep� operation�orderc C � || _ || _d S �N�rF rG )�selfrF rG r4 r4 r5 �__init__R �
zFixPlanStep.__init__N�
r- r. r/ r r r �fields�str�intrL r4 r4 r4 r5 rE L �
�rE c @ sN e Zd Zedee��edee��ede�gZdee dee defdd�Z dS )�AptUpgradeData�binary_packages�source_packages�pocketc C � || _ || _|| _d S rI �rT rU rV )rK rT rU rV r4 r4 r5 rL ^ s
zAptUpgradeData.__init__N�
r- r. r/ r r r rO r rP rL r4 r4 r4 r5 rS W s ����rS c �B e Zd Zede�ede�ede�gZdedef� fdd� Z � Z
S )�FixPlanAptUpgradeSteprF �datarG c � t � jtjj|d� || _d S �NrJ )�superrL r* r3 �valuer\ �rK r\ rG �� __class__r4 r5 rL q �
z FixPlanAptUpgradeStep.__init__) r- r. r/ r r rS r rO rQ rL �
__classcell__r4 r4 rb r5 r[ j � � r[ c @ sF e Zd Zede�ede�edee��gZdedee defdd�Z dS )�
AttachData�reason�required_servicerU c C rW rI �rh rU ri )rK rh rU ri r4 r4 r5 rL } s
zAttachData.__init__N�
r- r. r/ r r r rO rP r rL r4 r4 r4 r5 rg v s ����rg c rZ )�FixPlanAttachSteprF r\ rG c r] r^ )r_ rL r* r0 r` r\ ra rb r4 r5 rL � rd zFixPlanAttachStep.__init__) r- r. r/ r r rg r rO rQ rL re r4 r4 rb r5 rl � rf rl c @ s: e Zd Zede�edee��gZdedee fdd�Z dS )�
EnableData�servicerU c C rH rI �rn rU )rK rn rU r4 r4 r5 rL � rM zEnableData.__init__Nrk r4 r4 r4 r5 rm � �
�rm c rZ )�FixPlanEnableSteprF r\ rG c r] r^ )r_ rL r* r1 r` r\ ra rb r4 r5 rL � rd zFixPlanEnableStep.__init__) r- r. r/ r r rm r rO rQ rL re r4 r4 rb r5 rq � rf rq c @ s& e Zd Zede�gZdefdd�ZdS )�NoOpData�statusc C s
|| _ d S rI �rs )rK rs r4 r4 r5 rL � s
zNoOpData.__init__N)r- r. r/ r r rO rP rL r4 r4 r4 r5 rr � s �rr c rZ )�FixPlanNoOpSteprF r\ rG c r] r^ )r_ rL r* r2 r` r\ ra rb r4 r5 rL � rd zFixPlanNoOpStep.__init__) r- r. r/ r r rr r rO rQ rL re r4 r4 rb r5 ru � rf ru c s: e Zd Zede�ede�gZdedef� fdd� Z� ZS )�NoOpLivepatchFixDatars �
patch_versionc s t � j|d� || _d S �Nrt )r_ rL rw )rK rs rw rb r4 r5 rL � s
z NoOpLivepatchFixData.__init__) r- r. r/ r r rO rP rL re r4 r4 rb r5 rv � s
� rv c rZ )�FixPlanNoOpLivepatchFixSteprF r\ rG c � t � j||d� d S �N)r\ rG �r_ rL ra rb r4 r5 rL � � z$FixPlanNoOpLivepatchFixStep.__init__) r- r. r/ r r rv r rO rQ rL re r4 r4 rb r5 ry � rf ry c sN e Zd Zede�edee��ede�gZdedee def� fdd� Z � Z
S )�NoOpAlreadyFixedDatars rU rV c s t � j|d� || _|| _d S rx )r_ rL rU rV )rK rs rU rV rb r4 r5 rL � s
z NoOpAlreadyFixedData.__init__) r- r. r/ r r r rO rP r rL re r4 r4 rb r5 r~ � s ����r~ c �B e Zd Zede�ede�ede�gZdede f� fdd� Z
� Z S )�FixPlanNoOpAlreadyFixedSteprF r\ rG c rz r{ r| ra rb r4 r5 rL � r} z$FixPlanNoOpAlreadyFixedStep.__init__) r- r. r/ r r rv r rO r~ rQ rL re r4 r4 rb r5 r� � rf r� c @ rD )�FixPlanWarning� warning_typerG c C rH rI �r� rG )rK r� rG r4 r4 r5 rL � rM zFixPlanWarning.__init__NrN r4 r4 r4 r5 r� � rR r� c @ s: e Zd Zedee��ede�gZdee defdd�Z dS )�SecurityIssueNotFixedDatarU rs c C rH rI �rU rs )rK rU rs r4 r4 r5 rL � rM z"SecurityIssueNotFixedData.__init__NrY r4 r4 r4 r5 r� � s
�r� c sB e Zd Zede�ede�ede�gZdedef� fdd� Z � Z
S )�#FixPlanWarningSecurityIssueNotFixedr� rG r\ c � t � jtjj|d� || _d S �Nr� )r_ rL rA rC r` r\ �rK rG r\ rb r4 r5 rL
�
�
z,FixPlanWarningSecurityIssueNotFixed.__init__) r- r. r/ r r r r� rO rQ rL re r4 r4 rb r5 r� rf r� c @ s^ e Zd Zede�ede�ede�edee��ede�gZdededededee f
dd�Z dS ) � PackageCannotBeInstalledDatar( �binary_package_versionr' �related_source_packagesrV c C s" || _ || _|| _|| _|| _d S rI )r' r( r� rV r� )rK r( r� r' rV r� r4 r4 r5 rL s
z%PackageCannotBeInstalledData.__init__Nrk r4 r4 r4 r5 r� s$ ������r� c r )�&FixPlanWarningPackageCannotBeInstalledr� rG r\ c r� r� )r_ rL rA rB r` r\ r� rb r4 r5 rL 2 r� z/FixPlanWarningPackageCannotBeInstalled.__init__) r- r. r/ r r r r� rO rQ r� rL re r4 r4 rb r5 r� + rf r� c @ s: e Zd Zede�ededd�gZdedee fdd�ZdS )� FixPlanError�msg�codeF��requiredc C rH rI �r� r� )rK r� r� r4 r4 r5 rL @ rM zFixPlanError.__init__N) r- r. r/ r r rO rP r rL r4 r4 r4 r5 r� : rp r� c @ s e Zd ZdS )�AdditionalDataN)r- r. r/ r4 r4 r4 r5 r� E s r� c @ sB e Zd Zedee��edee��gZdee dee fdd�Z dS )�USNAdditionalData�associated_cves�associated_launchpad_bugsc C rH rI �r� r� )rK r� r� r4 r4 r5 rL P �
zUSNAdditionalData.__init__NrY r4 r4 r4 r5 r� I s ���r� c @ s� e Zd Zede�ededd�ede�edee�dd�edee��edee�dd�ed edd�ed
e dd�gZ
d d d �de de de e de e d e
e d
e de
e de
e e fd
d�Zd S )�
FixPlanResult�title� descriptionFr� �expected_status�affected_packages�plan�warnings�error�additional_dataN)r� r� c C s4 || _ || _|| _|| _|| _|| _|| _|| _d S rI �r� r� r� r� r� r� r� r� ) rK r� r� r� r� r� r� r� r� r4 r4 r5 rL f s
zFixPlanResult.__init__)r- r. r/ r r r rE r� r� r� rO rP r r rL r4 r4 r4 r5 r� Z s: �������� �
�r� c @ s> e Zd Zede�edee�dd�gZdedee fdd�ZdS )�FixPlanUSNResult�target_usn_plan�related_usns_planFr� c C rH rI �r� r� )rK r� r� r4 r4 r5 rL � r� zFixPlanUSNResult.__init__N) r- r. r/ r r� r rO r rL r4 r4 r4 r5 r� | s ���r� c @ s� e Zd Z ddedee deee fdd�Zdedeee f fd d
�Z
d e deee f fd d
�Z dedee fdd�Z
deee f fdd�Zdefdd�Zedd� �ZdS )�FixPlanNr� r� r� c C s6 d| _ || _|| _|| _g | _g | _d | _t� | _d S )N� ) rG r� r� r� � fix_steps� fix_warningsr� r� r� )rK r� r� r� r4 r4 r5 rL � s zFixPlan.__init__rF r\ c C s� d }|t jkrt| jt�|�d�}nH|t jkr"t| jt�|�d�}n8|t j krPd|v r6t
| jt �|�d�}n$d|v rEt | jt
�|�d�}nt| jt�|�d�}n
t| jt�|�d�}| j�|� | jd7 _d S )N�rG r\ rw rU r� )r* r0 rl rG rg � from_dictr1 rq rm r2 ry rv r� r~ ru rr r[ rS r� �append)rK rF r\ �fix_stepr4 r4 r5 �
register_step� s4
�
�
� � � � zFixPlan.register_stepr� c C sV d }|t jkrt| jt�|�d�}n
t| jt�|�d�}| j� |� | jd7 _d S )Nr� r� )
rA rC r� rG r� r� r� r� r� r� )rK r� r\ � fix_warningr4 r4 r5 �register_warning� s
�� zFixPlan.register_warning� error_msg�
error_codec C s t ||d�| _d S )Nr� )r� r� )rK r� r� r4 r4 r5 �register_error� s zFixPlan.register_errorr� c C � t di |��| _d S �Nr4 )r� r� �rK r� r4 r4 r5 �register_additional_data� r} z FixPlan.register_additional_data�returnc C s^ | j rdS t| j�dkr"t| jd t�r"| jd jjdkr"ttj �S | j
r*ttj �S ttj �S )Nr� r� r r7 )
r� �lenr� �
isinstanceru r\ rs rP r �SYSTEM_NOT_AFFECTEDr� �SYSTEM_STILL_VULNERABLE�SYSTEM_NON_VULNERABLE�rK r4 r4 r5 � _get_status� s �
zFixPlan._get_statusc
C s* t | j| j| �� | j| j| j| j| jd�S )Nr� ) r� r� r� r� r� r� r� r� r� r� r4 r4 r5 �fix_plan� s �zFixPlan.fix_planrI )r- r. r/ rP r r rL r* r r r� rA r� r� r� r� �propertyr� r4 r4 r4 r5 r� � s0 ���
��
�%�
�r� c @ s" e Zd Zdeeef fdd�ZdS )�
USNFixPlanr� c C r� r� )r� r� r� r4 r4 r5 r� � r} z#USNFixPlan.register_additional_dataN)r- r. r/ r rP r r� r4 r4 r4 r5 r� � s r� r� r� r� c C s, | rd| � � v rt| ||d�S t| ||d�S )N�cve�r� r� r� )�lowerr� r� r� r4 r4 r5 � get_fix_plan� s ��r� �issue_id�clientr� c
C sX z|j | d�}|j| d�}W ||fS tjy+ } z
|jdkr%tj| d��|�d }~ww )N)�cve_id)�details� �r� )�get_cve� get_noticesr
�SecurityAPIErrorr� �SecurityIssueNotFound)r� r� r� �usns�er4 r4 r5 �
_get_cve_data s �
��r� c
C sr z
|j | d�}t||�}W n tjy' } z
|jdkr!tj| d��|�d }~ww |jd s5tjd| dd��||fS )N)� notice_idr� r� �release_packagesz+metadata defines no fixed package versions.� )r� �issue�
extra_info)�
get_noticer r
r� r� r� �response�SecurityAPIMetadataError)r� r� �usnr� r� r4 r4 r5 �
_get_usn_data s
��
�r� � binary_pkgsrV c C sv g }g }t | �D ].}|tjk}tj|j|d�}|r)t�|j|�dkr)|�|j� q|�t |j
|j|jd�� q||fS )N)�check_esm_cacher )r' r( r) ) �sortedr �'SECURITY_UBUNTU_STANDARD_UPDATES_POCKETr �get_pkg_candidate_version�
binary_pkg�version_compare�
fixed_versionr� r& �
source_pkg)r� rV � upgrade_pkgs� unfixed_pkgsr� r� �candidate_versionr4 r4 r5 �_get_upgradable_pkgs5 s0 �������r� �pkg_status_group�usn_released_pkgs�installed_pkgsc C s� t t�}t t�}| D ]C\}}||j �||f� || �� D ].\}}|�|i �} || vr-q | �|i ��dd�}
t�|
|�dkrL||j �t|||
d�� q q
||fS )Nr) r� r )r� r� r� ) r �list�
pocket_sourcer� �items�getr r� r ) r� r� r� �binary_pocket_pkgs�src_pocket_pkgs�src_pkg�
pkg_statusr� r) �usn_released_srcr� r4 r4 r5 �,_get_upgradable_package_candidates_by_pocketW s, �
����r� �cfgc
C s� t | �\}}|r t| d�}|jtjtjj|d�d� |jS t |d�}t
� }z
t | |d�\}}W n$ t j
yS } zt| d�}|j| j| jd� |jW Y d } ~ S d } ~ ww t||d�}
t|i d�} |j} |jD ]}
|
j} t| | |
| ||d �S )
N�r� )rs rw �rF r\ �r� �r� r� �r� r� )r� �installed_packages�� beta_pockets)r� �issue_description�affected_pkg_statusr� r� r� )r r� r� r* r2 r6 r: r` r� r r# r� r
r� r� r� �msg_coder r" r� �noticesr� �_generate_fix_plan)r� r� �livepatch_cve_statusrw r� r� r� r� r� r� r r� �cve_description�noticer4 r4 r5 �
_fix_plan_cveu sP �
��
����
�r c
C s@ t |d�}t� }z
t| |d�\}}W n( tjy: } zt| d�}|j|j|jd� t |j
g d�W Y d }~S d }~ww t ||d�}t |gi d�} |j
sMg n|j
|jsTg n|jd�}
t| |j|| |||
d �} g } |D ]0}t ||d�}t |gi d�} |j
s}g n|j
|js�g n|jd�}
| �t|j|j|| |||
d �� qit | | d�S )
Nr� r� r� r r� )r� r r r� )r� r r r� r� r� r� )r r# r� r
r� r� r� r� r r� r� r r" �cves_ids�
referencesr r� r� �id)
r� r� r� r� r� � related_usnsr� r� r r� r� r� r� r4 r4 r5 �
_fix_plan_usn� sz
��������
������ �r c C sR | rt �t| �s t| d�}tjj| d�}|j|j|j d� |j
S | � � } t | |�S )Nr� r� r )
�re�matchr r� r �INVALID_SECURITY_ISSUE�formatr� r� �namer� �upperr �r� r� r� r� r4 r4 r5 � fix_plan_cve� s
r c C sZ | rt �t| �s$t| d�}tjj| d�}|j|j|j d� t
|j g d�S | � � } t
| |�S )Nr� r� r r� )r r r r� r r r r� r� r r� r� r r r r4 r4 r5 � fix_plan_usn� s
�
r c C s. | t jkrtS | t jkrtS | t jkrtS | S rI )r r� �STANDARD_UPDATES_POCKET�SECURITY_UA_INFRA_POCKET�ESM_INFRA_POCKET�SECURITY_UA_APPS_POCKET�ESM_APPS_POCKET)rV r4 r4 r5 �get_pocket_short_name s
r )r� r r c
C s8 t |�}tt�}t| |tt|�� ��d�} |r | �|� |dkr/| jtj dt
j j id� | j
S t||�}
t|
�� �D ]!\} } | dkrS| jtjdd� | D �| d�d � q:t| ||�\}}
q:|sa| j
S tjtjtjfD ]�}|| }|
| }d
d� |D �}t|�}|s�|r�| jtj t
jj ||d �d� qit||�\}}|r�|D ]}| jtj|j |j |j ||d �d � q�|tjk�r |tjkr�d
}nd}t |�j s�| jtj!d||d�d� nt"|�\}}|t#j$kr�| jtj!t%j&j |d�d� t'|�j(p�g }|r�dd� |D �ng }||v�r | jtj)||d�d� | jtj*|||d�d� qi| j
S )Nr� r rs r� �releasedc S � g | ]\}}|�qS r4 r4 ��.0r� �_r4 r4 r5 �
<listcomp>6 s �z&_generate_fix_plan.<locals>.<listcomp>r� )r� r\ c S r" r4 r4 r# r4 r4 r5 r& P s )rs rU rV )r( r� r' r� rV r$ r% r= rj )rh rU c S s g | ]}|j �qS r4 )r )r$ rn r4 r4 r5 r& � s ro rX )+r� r r� r� r� �keysr� r� r* r2 r6 r9 r` r� r! r� r� rA rC r� r r� r r r r8 r� rB r( r) r' r
� is_attachedr0 r r �ACTIVEr< r> r �enabled_servicesr1 r3 )r� r r r� r� r� r� �countr� r� �pkg_status_groups� status_valuer� r� rV �
pkg_src_groupr� � source_pkgs� pocket_namer� r� � unfixed_pkg�service_to_check�contract_expiry_statusr% r* �enabled_services_namesr4 r4 r5 r s�
�
�����
�������
��
����
���� r )NN)\�enumr � collectionsr �typingr r r r r r �uaclientr r
r �-uaclient.api.u.pro.status.enabled_services.v1r �(uaclient.api.u.pro.status.is_attached.v1r
�uaclient.configr �uaclient.contractr r �uaclient.data_typesr r r r r �uaclient.securityr r r r r r r r r r r r! r" r# r r r rP r& �unique�Enumr* r6 r< rA rE rS r[ rg rl rm rq rr ru rv ry r~ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r4 r4 r4 r5 �<module> s� @
��
"k���
���
���
���
�"��
� 1F ���
���� �