fix: update openssl checker (#4051)

Update openssl patten to correctly handle libssl3 Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com>
intel · Apr 18, 2024 · 467ef3f · 467ef3f
1 parent b03681c
commit 467ef3f
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 1 deletion.
diff --git a/cve_bin_tool/checkers/openssl.py b/cve_bin_tool/checkers/openssl.py
@@ -18,7 +18,7 @@ class OpensslChecker(Checker):
     CONTAINS_PATTERNS = [r"part of OpenSSL", r"openssl.cnf", r"-DOPENSSL_"]
     FILENAME_PATTERNS = [r"libssl.so.", r"libcrypto.so"]
     VERSION_PATTERNS = [
-        r"OpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+\r?\n(?:%s \(Library: %s\)|[a-zA-Z0-9:, \-\r\n]*OPENSSLDIR|ssl)",
+        r"OpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+\r?\n(?:%s \(Library: %s\)|[a-zA-Z0-9:, \.\-\r\n]*OPENSSLDIR|ssl)",
         r"%s \(Library: %s\)\r?\nOpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+",
     ]
     VENDOR_PRODUCT = [("openssl", "openssl")]
diff --git a/test/condensed-downloads/libssl3_3.1.5-1_arm64.deb.tar.gz b/test/condensed-downloads/libssl3_3.1.5-1_arm64.deb.tar.gz
diff --git a/test/test_data/openssl.py b/test/test_data/openssl.py
@@ -32,6 +32,12 @@
         "product": "openssl",
         "version": "3.0.5",
     },
+    {
+        "url": "http://ftp.de.debian.org/debian/pool/main/o/openssl/",
+        "package_name": "libssl3_3.1.5-1_arm64.deb",
+        "product": "openssl",
+        "version": "3.1.5",
+    },
     {
         "url": "https://files.pythonhosted.org/packages/ba/91/84a29d6a27fd6dfc21f475704c4d2053d58ed7a4033c2b0ce1b4ca4d03d9/",
         "package_name": "cryptography-3.0-cp35-abi3-manylinux2010_x86_64.whl",