fix: update openssl checker (#4698)

ffontaine · web-flow · commit 3029cb0a50b3 · 2025-01-21T12:27:54.000-08:00
Improve openssl pattern to catch version on 'exotic' openssl libraries

Signed-off-by: Fabrice Fontaine &lt;fabrice.fontaine@orange.com&gt;
diff --git a/cve_bin_tool/checkers/openssl.py b/cve_bin_tool/checkers/openssl.py
@@ -19,6 +19,6 @@ class OpensslChecker(Checker):
     FILENAME_PATTERNS = [r"libssl.so.", r"libcrypto.so"]
     VERSION_PATTERNS = [
         r"OpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+\r?\n(?:%s \(Library: %s\)|[a-zA-Z0-9:, \.\-\r\n]*OPENSSLDIR|ssl)",
-        r"%s \(Library: %s\)\r?\nOpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+",
+        r"(?:%s \(Library: %s\)\r?\n|OPENSSLDIR[a-zA-Z0-9:/ \"\-\r\n]*)OpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+",
     ]
     VENDOR_PRODUCT = [("openssl", "openssl")]

Original file line number	Diff line number	Diff line change
`@@ -19,6 +19,6 @@ class OpensslChecker(Checker):`
`19`	`19`	`FILENAME_PATTERNS = [r"libssl.so.", r"libcrypto.so"]`
`20`	`20`	`VERSION_PATTERNS = [`
`21`	`21`	`r"OpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]) [a-zA-Z0-9 ]+\r?\n(?:%s \(Library: %s\)\|[a-zA-Z0-9:, \.\-\r\n]OPENSSLDIR\|ssl)",`
`22`		`- r"%s \(Library: %s\)\r?\nOpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+",`
	`22`	`+ r"(?:%s \(Library: %s\)\r?\n\|OPENSSLDIR[a-zA-Z0-9:/ \"\-\r\n])OpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]) [a-zA-Z0-9 ]+",`
`23`	`23`	`]`
`24`	`24`	`VENDOR_PRODUCT = [("openssl", "openssl")]`