diff --git a/cve_bin_tool/checkers/__init__.py b/cve_bin_tool/checkers/__init__.py index 7d7f8ecab1..790209747f 100644 --- a/cve_bin_tool/checkers/__init__.py +++ b/cve_bin_tool/checkers/__init__.py @@ -197,6 +197,7 @@ "lz4", "mailx", "mariadb", + "mbedtls", "mdadm", "memcached", "minetest", diff --git a/cve_bin_tool/checkers/mbedtls.py b/cve_bin_tool/checkers/mbedtls.py new file mode 100644 index 0000000000..594b0947fb --- /dev/null +++ b/cve_bin_tool/checkers/mbedtls.py @@ -0,0 +1,20 @@ +# Copyright (C) 2023 Orange +# SPDX-License-Identifier: GPL-3.0-or-later + + +""" +CVE checker for mbedtls + +https://www.cvedetails.com/product/32568/ARM-Mbed-Tls.html?vendor_id=15698 + +""" +from __future__ import annotations + +from cve_bin_tool.checkers import Checker + + +class MbedtlsChecker(Checker): + CONTAINS_PATTERNS: list[str] = [] + FILENAME_PATTERNS: list[str] = [] + VERSION_PATTERNS = [r"[m|M]bed TLS ([0-9]+\.[0-9]+\.[0-9]+)"] + VENDOR_PRODUCT = [("arm", "mbed_tls")] diff --git a/test/condensed-downloads/libmbedcrypto3_2.16.0-1_amd64.deb.tar.gz b/test/condensed-downloads/libmbedcrypto3_2.16.0-1_amd64.deb.tar.gz new file mode 100644 index 0000000000..31948768ea Binary files /dev/null and b/test/condensed-downloads/libmbedcrypto3_2.16.0-1_amd64.deb.tar.gz differ diff --git a/test/condensed-downloads/mbedtls-2.16.9-r0.apk.tar.gz b/test/condensed-downloads/mbedtls-2.16.9-r0.apk.tar.gz new file mode 100644 index 0000000000..76b79cfe41 Binary files /dev/null and b/test/condensed-downloads/mbedtls-2.16.9-r0.apk.tar.gz differ diff --git a/test/condensed-downloads/mbedtls-2.28.5-1.fc40.aarch64.rpm.tar.gz b/test/condensed-downloads/mbedtls-2.28.5-1.fc40.aarch64.rpm.tar.gz new file mode 100644 index 0000000000..2a22d9aba6 Binary files /dev/null and b/test/condensed-downloads/mbedtls-2.28.5-1.fc40.aarch64.rpm.tar.gz differ diff --git a/test/test_data/mbedtls.py b/test/test_data/mbedtls.py new file mode 100644 index 0000000000..ec68287a88 --- /dev/null +++ b/test/test_data/mbedtls.py @@ -0,0 +1,35 @@ +# Copyright (C) 2023 Orange +# SPDX-License-Identifier: GPL-3.0-or-later + +mapping_test_data = [ + { + "product": "mbed_tls", + "version": "2.16.0", + "version_strings": ["mbed TLS 2.16.0"], + }, + { + "product": "mbed_tls", + "version": "2.28.5", + "version_strings": ["Mbed TLS 2.28.5"], + }, +] +package_test_data = [ + { + "url": "http://rpmfind.net/linux/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/m/", + "package_name": "mbedtls-2.28.5-1.fc40.aarch64.rpm", + "product": "mbed_tls", + "version": "2.28.5", + }, + { + "url": "http://ftp.fr.debian.org/debian/pool/main/m/mbedtls/", + "package_name": "libmbedcrypto3_2.16.0-1_amd64.deb", + "product": "mbed_tls", + "version": "2.16.0", + }, + { + "url": "https://dl-cdn.alpinelinux.org/alpine/v3.11/main/x86_64/", + "package_name": "mbedtls-2.16.9-r0.apk", + "product": "mbed_tls", + "version": "2.16.9", + }, +]