diff --git a/vulnerabilities/importers/archlinux.py b/vulnerabilities/importers/archlinux.py index 95e674735..f6effba5c 100644 --- a/vulnerabilities/importers/archlinux.py +++ b/vulnerabilities/importers/archlinux.py @@ -35,6 +35,8 @@ from vulnerabilities.data_source import DataSource from vulnerabilities.data_source import DataSourceConfiguration from vulnerabilities.data_source import Reference +from vulnerabilities.data_source import VulnerabilitySeverity +from vulnerabilities.severity_systems import scoring_systems def validate_schema(advisory_dict): @@ -108,6 +110,13 @@ def _parse(self, record) -> List[Advisory]: Reference( reference_id=record["name"], url="https://security.archlinux.org/{}".format(record["name"]), + severities=[ + VulnerabilitySeverity( + system=scoring_systems["avgs"], + value=record["severity"] + ) + + ] ) ) diff --git a/vulnerabilities/severity_systems.py b/vulnerabilities/severity_systems.py index 42a32b7b9..bf9572b40 100644 --- a/vulnerabilities/severity_systems.py +++ b/vulnerabilities/severity_systems.py @@ -70,4 +70,9 @@ def as_score(self, value): name="RedHat Aggregate severity", url="https://access.redhat.com/security/updates/classification/", ), + "avgs": ScoringSystem( + identifier="avgs", + name="Archlinux Vulnerability Group Severity", + url="https://wiki.archlinux.org/index.php/Bug_reporting_guidelines#Severity" + ) }