From 738e06c70c345eda83fcdca1ee515de4cdc479ea Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Wed, 15 Jan 2025 12:22:59 +0100 Subject: [PATCH] fix: update openssl checker Improve openssl pattern to catch version on 'exotic' openssl libraries Signed-off-by: Fabrice Fontaine --- cve_bin_tool/checkers/openssl.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cve_bin_tool/checkers/openssl.py b/cve_bin_tool/checkers/openssl.py index 97edd4e6b3..290d1f7304 100644 --- a/cve_bin_tool/checkers/openssl.py +++ b/cve_bin_tool/checkers/openssl.py @@ -19,6 +19,6 @@ class OpensslChecker(Checker): FILENAME_PATTERNS = [r"libssl.so.", r"libcrypto.so"] VERSION_PATTERNS = [ r"OpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+\r?\n(?:%s \(Library: %s\)|[a-zA-Z0-9:, \.\-\r\n]*OPENSSLDIR|ssl)", - r"%s \(Library: %s\)\r?\nOpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+", + r"(?:%s \(Library: %s\)\r?\n|OPENSSLDIR[a-zA-Z0-9:/ \"\-\r\n]*)OpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+", ] VENDOR_PRODUCT = [("openssl", "openssl")]