farol/farolluz: farolluz/parsers/cvrf.py annotate

author	Benoît Allard <benoit.allard@greenbone.net>
date	Tue, 23 Sep 2014 15:19:14 +0200
parents
children	d47e1164740f

rev	line source
0 e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	1 # -- coding: utf-8 --
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	2 # Description:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	3 # Methods for parsing CVRF documents
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	4 #
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	5 # Authors:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	6 # Benoît Allard <benoit.allard@greenbone.net>
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	7 #
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	8 # Copyright:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	9 # Copyright (C) 2014 Greenbone Networks GmbH
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	10 #
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	11 # This program is free software; you can redistribute it and/or
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	12 # modify it under the terms of the GNU General Public License
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	13 # as published by the Free Software Foundation; either version 2
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	14 # of the License, or (at your option) any later version.
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	15 #
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	16 # This program is distributed in the hope that it will be useful,
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	17 # but WITHOUT ANY WARRANTY; without even the implied warranty of
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	18 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	19 # GNU General Public License for more details.
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	20 #
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	21 # You should have received a copy of the GNU General Public License
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	22 # along with this program; if not, write to the Free Software
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	23 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	24
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	25 """\
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	26 Methods for parsing of CVRF Documents
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	27 """
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	28
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	29 from __future__ import print_function
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	30
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	31 import re
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	32 import textwrap
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	33 import xml.etree.ElementTree as ET
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	34 from datetime import datetime, timedelta
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	35
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	36 try:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	37 from datetime import timezone
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	38 except ImportError:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	39 from ..py2 import FixedTimeZone as timezone
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	40
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	41 from ..cvrf import (CVRF, CVRFPublisher, CVRFTracking, CVRFRevision, CVRFNote,
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	42 CVRFAcknowledgment, CVRFProductBranch, CVRFFullProductName, CVRFGenerator,
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	43 CVRFRelationship, CVRFVulnerability, CVRFVulnerabilityID, CVRFThreat,
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	44 CVRFProductStatus, CVRFCVSSSet, CVRFReference, CVRFRemediation, CVRFGroup,
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	45 CVRFInvolvement, CVRFCWE, CVRFTrackingID)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	46
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	47 NAMESPACES = {
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	48 'cvrf': "http://www.icasi.org/CVRF/schema/cvrf/1.1",
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	49 'prod': "http://www.icasi.org/CVRF/schema/prod/1.1",
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	50 'vuln': "http://www.icasi.org/CVRF/schema/vuln/1.1",
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	51 'xml': "http://www.w3.org/XML/1998/namespace",
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	52 }
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	53
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	54
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	55 def UN(ns, name):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	56 """ UN for Universal Name """
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	57 return "{%s}%s" % (NAMESPACES[ns], name)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	58
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	59
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	60 def parseVersion(string):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	61 return tuple(int(i) for i in string.split('.'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	62
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	63
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	64 def parseDate(string):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	65 m = re.match('(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:([+-])(\d{2}):(\d{2})\|(Z))?', string)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	66 if (m.group(7) is None) or (m.group(7) == 'Z'):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	67 tzhours = 0
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	68 tzmin = 0
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	69 else:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	70 tzhours = int(m.group(8))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	71 if m.group(7) == '-':
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	72 tzhours = - tzhours
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	73 tzmin = int(m.group(9))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	74 return datetime(int(m.group(1)), int(m.group(2)), int(m.group(3)), int(m.group(4)), int(m.group(5)), int(m.group(6)), tzinfo=timezone(timedelta(hours=tzhours, minutes=tzmin)))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	75
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	76
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	77 def parseNote(elem):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	78 return CVRFNote(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	79 elem.attrib['Type'],
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	80 int(elem.attrib['Ordinal']),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	81 textwrap.dedent(elem.text).strip(),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	82 elem.attrib.get('Title'),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	83 elem.attrib.get('Audience')
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	84 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	85
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	86
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	87 def parseReference(elem, ns='cvrf'):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	88 """ ns is the current namespace """
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	89 return CVRFReference(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	90 elem.findtext(UN(ns, 'URL')).strip(),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	91 textwrap.dedent(elem.findtext(UN(ns, 'Description'))).strip(),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	92 elem.attrib.get('Type')
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	93 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	94
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	95
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	96 def parseAcknowledgment(elem, ns='cvrf'):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	97 return CVRFAcknowledgment(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	98 elem.findtext(UN(ns, 'Name')),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	99 elem.findtext(UN(ns, 'Organization')),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	100 elem.findtext(UN(ns, 'Description')),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	101 elem.findtext(UN(ns, 'URL')),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	102 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	103
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	104
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	105 def parseFullProductName(elem, parent):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	106 return CVRFFullProductName(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	107 elem.attrib['ProductID'],
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	108 elem.text.strip(),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	109 parent,
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	110 cpe=elem.attrib.get('CPE')
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	111 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	112
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	113
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	114 def parseProdBranch(elem, ptree, parentbranch=None):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	115 """ Recursively parses the branches and the terminal productnames """
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	116 fpncvrf = elem.find(UN('prod', 'FullProductName'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	117 if (parentbranch is not None) and (fpncvrf is not None):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	118 # Don't process the products at the root of the tree
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	119 prod = parseFullProductName(fpncvrf, parentbranch)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	120 ptree.addProduct(prod)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	121
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	122 if parentbranch is None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	123 parentbranch = ptree
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	124 for brcvrf in elem.findall(UN('prod', 'Branch')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	125 br = CVRFProductBranch(brcvrf.attrib['Type'], brcvrf.attrib['Name'], parentbranch)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	126 # And go into recursion ...
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	127 br._childs = list(parseProdBranch(brcvrf, ptree, br))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	128 yield br
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	129
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	130
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	131 def parseVulnerability(elem):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	132 vuln = CVRFVulnerability(int(elem.attrib['Ordinal']))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	133
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	134 xmltitle = elem.findtext(UN('vuln', 'Title'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	135 if xmltitle is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	136 vuln.setTitle(xmltitle.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	137
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	138 xmlID = elem.find(UN('vuln', 'ID'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	139 if xmlID is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	140 vuln.setID(CVRFVulnerabilityID(xmlID.attrib['SystemName'], xmlID.text.strip()))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	141
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	142 for xmlnote in elem.findall('/'.join([UN('vuln', 'Notes'), UN('vuln', 'Note')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	143 vuln.addNote(parseNote(xmlnote))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	144
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	145 xmldiscoverydate = elem.findtext(UN('vuln', 'DiscoveryDate'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	146 if xmldiscoverydate is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	147 vuln.setDiscoveryDate(parseDate(xmldiscoverydate))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	148 xmlreleasedate = elem.findtext(UN('vuln', 'ReleaseDate'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	149 if xmlreleasedate is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	150 vuln.setReleaseDate(parseDate(xmlreleasedate))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	151
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	152 for xmlinv in elem.findall('/'.join([UN('vuln', 'Involvements'), UN('vuln', 'Involvement')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	153 involvement = CVRFInvolvement(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	154 xmlinv.attrib['Party'],
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	155 xmlinv.attrib['Status']
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	156 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	157 xmldescr = xmlinv.findtext(UN('vuln', 'Description'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	158 if xmldescr is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	159 involvement.setDescription(textwrap.dedent(xmldescr).strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	160 vuln.addInvolvement(involvement)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	161
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	162 xmlcve = elem.findtext(UN('vuln', 'CVE'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	163 if xmlcve is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	164 vuln.setCVE(xmlcve.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	165
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	166 for xmlcwe in elem.findall(UN('vuln', 'CWE')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	167 vuln.addCWE(CVRFCWE(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	168 xmlcwe.attrib['ID'],
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	169 xmlcwe.text.strip()
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	170 ))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	171
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	172 for xmlstatus in elem.findall('/'.join([UN('vuln', 'ProductStatuses'), UN('vuln', 'Status')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	173 status = CVRFProductStatus(xmlstatus.attrib['Type'])
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	174 for xmlproductid in xmlstatus.findall(UN('vuln', 'ProductID')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	175 status.addProductID(xmlproductid.text.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	176
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	177 vuln.addProductStatus(status)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	178
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	179 for xmlthreat in elem.findall('/'.join([UN('vuln', 'Threats'), UN('vuln', 'Threat')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	180 threat = CVRFThreat(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	181 xmlthreat.attrib['Type'],
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	182 textwrap.dedent(xmlthreat.findtext(UN('vuln', 'Description'))).strip()
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	183 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	184 xmldate = xmlthreat.findtext(UN('vuln', 'Date'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	185 if xmldate is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	186 threat.setDate(parseDate(xmldate))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	187 for xmlpid in xmlthreat.findall(UN('vuln', 'ProductID')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	188 threat.addProductID(xmlpid.text.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	189 for xmlgid in xmlthreat.findall(UN('vuln', 'GroupID')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	190 threat.addGroupID(xmlgid.text.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	191
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	192 vuln.addThreat(threat)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	193
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	194 for xmlcvss in elem.findall('/'.join([UN('vuln', 'CVSSScoreSets'), UN('vuln', 'ScoreSet')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	195 cvss_set = CVRFCVSSSet(float(xmlcvss.findtext(UN('vuln', 'BaseScore')).strip()))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	196 xmltempscore = xmlcvss.findtext(UN('vuln', 'TemporalScore'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	197 if xmltempscore is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	198 cvss_set.setTemporalScore(float(xmltempscore.strip()))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	199 xmlenvscore = xmlcvss.findtext(UN('vuln', 'EnvironmentalScore'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	200 if xmlenvscore is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	201 cvss_set.setEnvironmentalScore(float(xmlenvscore.strip()))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	202 xmlvector = xmlcvss.findtext(UN('vuln', 'Vector'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	203 if xmlvector is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	204 cvss_set.setVector(xmlvector.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	205 for xmlprodid in xmlcvss.findall(UN('vuln', 'ProductID')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	206 cvss_set.addProductID(xmlprodid.text.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	207
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	208 vuln.addCVSSSet(cvss_set)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	209
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	210 for xmlremediation in elem.findall('/'.join([UN('vuln', 'Remediations'), UN('vuln', 'Remediation')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	211 remediation = CVRFRemediation(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	212 xmlremediation.attrib['Type'],
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	213 textwrap.dedent(xmlremediation.findtext(UN('vuln', 'Description'))).strip()
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	214 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	215 xmldate = xmlremediation.findtext(UN('vuln', 'Date'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	216 if xmldate is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	217 remediation.setDate(parseDate(xmldate))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	218 xmlentitlement = xmlremediation.findtext(UN('vuln', 'Entitlement'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	219 if xmlentitlement is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	220 remediation.setEntitlement(textwrap.dedent(xmlentitlement).strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	221 xmlurl = xmlremediation.findtext(UN('vuln', 'URL'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	222 if xmlurl is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	223 remediation.setURL(xmlurl.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	224 for xmlpid in xmlremediation.findall(UN('vuln', 'ProductID')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	225 remediation.addProductID(xmlpid.text.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	226 for xmlgid in xmlremediation.findall(UN('vuln', 'GroupID')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	227 remediation.addGroupID(xmlgid.text.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	228
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	229 vuln.addRemediation(remediation)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	230
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	231 for xmlref in elem.findall('/'.join([UN('vuln', 'References'), UN('vuln', 'Reference')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	232 vuln.addReference(parseReference(xmlref, 'vuln'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	233
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	234 for xmlack in elem.findall('/'.join([UN('vuln', 'Acknowledgments'), UN('vuln', 'Acknowledgment')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	235 vuln.addAcknowledgment(parseAcknowledgment(xmlack, 'vuln'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	236
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	237 return vuln
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	238
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	239
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	240 def parse(xml):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	241 if hasattr(xml, 'read'):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	242 xml = xml.read()
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	243 cvrfdoc = ET.fromstring(xml)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	244 if cvrfdoc.tag != UN('cvrf', 'cvrfdoc'):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	245 raise ValueError('Not a CVRF document !')
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	246 doc = CVRF(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	247 cvrfdoc.findtext(UN('cvrf', 'DocumentTitle')).strip(),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	248 cvrfdoc.findtext(UN('cvrf', 'DocumentType')).strip()
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	249 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	250 cvrfpub = cvrfdoc.find(UN('cvrf', 'DocumentPublisher'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	251 pub = CVRFPublisher(cvrfpub.attrib['Type'], cvrfpub.attrib.get('VendorID'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	252 doc.setPublisher(pub)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	253 contact = cvrfpub.find(UN('cvrf', 'ContactDetails'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	254 if contact is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	255 pub.setContact(contact.text.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	256 authority = cvrfpub.find(UN('cvrf', 'IssuingAuthority'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	257 if authority is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	258 pub.setAuthority(authority.text.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	259 cvrftracking = cvrfdoc.find(UN('cvrf', 'DocumentTracking'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	260 identification = CVRFTrackingID(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	261 cvrftracking.findtext('/'.join([UN('cvrf', 'Identification'), UN('cvrf', 'ID')])).strip()
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	262 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	263 for cvrfalias in cvrftracking.findall('/'.join([UN('cvrf', 'Identification'), UN('cvrf', 'Alias')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	264 identification.addAlias(cvrfalias.text.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	265 tracking = CVRFTracking(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	266 identification,
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	267 cvrftracking.findtext(UN('cvrf', 'Status')).strip(),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	268 parseVersion(cvrftracking.findtext(UN('cvrf', 'Version')).strip()),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	269 parseDate(cvrftracking.findtext(UN('cvrf', 'InitialReleaseDate')).strip()),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	270 parseDate(cvrftracking.findtext(UN('cvrf', 'CurrentReleaseDate')).strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	271 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	272 doc.setTracking(tracking)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	273 for cvrfrev in cvrftracking.findall('/'.join([UN('cvrf', 'RevisionHistory'), UN('cvrf', 'Revision')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	274 rev = CVRFRevision(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	275 parseVersion(cvrfrev.findtext(UN('cvrf', 'Number')).strip()),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	276 parseDate(cvrfrev.findtext(UN('cvrf', 'Date')).strip()),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	277 cvrfrev.findtext(UN('cvrf', 'Description')).strip(),
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	278 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	279 tracking.addRevision(rev)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	280
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	281 xmlgenerator = cvrftracking.find(UN('cvrf', 'Generator'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	282 if xmlgenerator is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	283 generator = CVRFGenerator()
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	284 xmlengine = xmlgenerator.findtext(UN('cvrf', 'Engine'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	285 if xmlengine is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	286 generator.setEngine(xmlengine.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	287 xmldate = xmlgenerator.findtext(UN('cvrf', 'Date'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	288 if xmldate is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	289 generator.setDate(parseDate(xmldate.strip()))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	290 tracking.setGenerator(generator)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	291
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	292 for cvrfnote in cvrfdoc.findall('/'.join([UN('cvrf', 'DocumentNotes'), UN('cvrf', 'Note')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	293 doc.addNote(parseNote(cvrfnote))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	294
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	295 distr = cvrfdoc.findtext(UN('cvrf', 'DocumentDistribution'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	296 if distr is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	297 doc.setDistribution(textwrap.dedent(distr).strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	298
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	299 # This is in a quite free format, not sure how to do something with it ...
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	300 xmlaggsev = cvrfdoc.find(UN('cvrf', 'AggregateSeverity'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	301
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	302 for xmlref in cvrfdoc.findall('/'.join([UN('cvrf', 'DocumentReferences'), UN('cvrf', 'Reference')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	303 doc.addReference(parseReference(xmlref))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	304
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	305 for cvrfack in cvrfdoc.findall('/'.join([UN('cvrf', 'Acknowledgments'), UN('cvrf', 'Acknowledgment')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	306 doc.addAcknowledgment(parseAcknowledgment(cvrfack))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	307
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	308 # --- The ProductTree
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	309
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	310 cvrfptree = cvrfdoc.find(UN('prod', 'ProductTree'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	311 if cvrfptree is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	312 producttree = doc.createProductTree()
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	313 for branch in parseProdBranch(cvrfptree, producttree):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	314 producttree.addBranch(branch)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	315
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	316 for product in cvrfptree.findall(UN('prod', 'FullProductName')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	317 producttree.addProduct(parseFullProductName(product, producttree))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	318
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	319 for cvrfrel in cvrfptree.findall(UN('prod', 'Relationship')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	320 rel = CVRFRelationship(
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	321 cvrfrel.attrib['ProductReference'],
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	322 cvrfrel.attrib['RelationType'],
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	323 cvrfrel.attrib['RelatesToProductReference']
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	324 )
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	325 producttree.addRelationship(rel)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	326 producttree.addProduct(parseFullProductName(cvrfrel.find(UN('prod', 'FullProductName')), rel))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	327
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	328 for xmlgroup in cvrfptree.findall('/'.join([UN('prod', 'ProductGroups'), UN('prod', 'Group')])):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	329 group = CVRFGroup(xmlgroup.attrib['GroupID'])
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	330 xmldescr = xmlgroup.findtext(UN('prod', 'Description'))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	331 if xmldescr is not None:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	332 group.setDescription(textwrap.dedent(xmldescr).strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	333 for xmlpid in xmlgroup.findall(UN('prod', 'ProductID')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	334 group.addProductID(xmlpid.text.strip())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	335 producttree.addGroup(group)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	336
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	337 # --- The Vulnerabilities
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	338
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	339 for cvrfvuln in cvrfdoc.findall(UN('vuln', 'Vulnerability')):
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	340 doc.addVulnerability(parseVulnerability(cvrfvuln))
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	341
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	342 return doc
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	343
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	344
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	345 if __name__ == "__main__":
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	346 import sys
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	347 with open(sys.argv[1], 'rt') as f:
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	348 cvrf = parse(f)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	349 cvrf.validate()
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	350 print(cvrf)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	351 print(cvrf.getHighestCVSS()._vector)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	352 print(cvrf.getProductList())
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	353 print(cvrf._producttree._branches)
e18b61a73a68 Initial Release Benoît Allard <benoit.allard@greenbone.net> parents: diff changeset	354 # print(cvrf._producttree._branches[0]._childs)

0

e18b61a73a68 Initial Release