Merge branch 'main' into split-curl-libcurl

cve_bin_tool/checkers/__init__.py

@@ -34,6 +34,7 @@
     "bro",
     "bubblewrap",
     "busybox",
+    "bwm_ng",
     "bzip2",
     "c_ares",
     "capnproto",
@@ -134,6 +135,7 @@
     "libarchive",
     "libass",
     "libbpg",
+    "libcoap",
     "libconfuse",
     "libcurl",
     "libdb",

cve_bin_tool/checkers/bwm_ng.py

@@ -0,0 +1,20 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for bwm-ng:
+
+https://www.cvedetails.com/product/113242/Bwm-ng-Project-Bwm-ng.html?vendor_id=26951
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class BwmNgChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"bwm-ng v([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("bwm-ng_project", "bwm-ng")]

cve_bin_tool/checkers/libcoap.py

@@ -0,0 +1,20 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for libcoap:
+
+https://www.cvedetails.com/product/143502/Libcoap-Libcoap.html?vendor_id=31037
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class LibcoapChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"libcoap ([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("libcoap", "libcoap")]

test/test_data/bwm_ng.py

@@ -0,0 +1,26 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {"product": "bwm-ng", "version": "0.6.1", "version_strings": ["bwm-ng v0.6.1"]}
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/b/",
+        "package_name": "bwm-ng-0.6.3-1.fc39.aarch64.rpm",
+        "product": "bwm-ng",
+        "version": "0.6.3",
+    },
+    {
+        "url": "http://ftp.fr.debian.org/debian/pool/main/b/bwm-ng/",
+        "package_name": "bwm-ng_0.6.1-6_amd64.deb",
+        "product": "bwm-ng",
+        "version": "0.6.1",
+    },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",
+        "package_name": "bwm-ng_0.6.1-1_x86_64.ipk",
+        "product": "bwm-ng",
+        "version": "0.6.1",
+    },
+]

test/test_data/libcoap.py

@@ -0,0 +1,33 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {"product": "libcoap", "version": "4.3.1", "version_strings": ["libcoap 4.3.1"]}
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/l/",
+        "package_name": "libcoap-4.3.2-0.1.rc1.fc39.aarch64.rpm",
+        "product": "libcoap",
+        "version": "4.3.2",
+    },
+    {
+        "url": "http://ftp.fr.debian.org/debian/pool/main/libc/libcoap/",
+        "package_name": "libcoap-1-0_4.1.2-1_amd64.deb",
+        "product": "libcoap",
+        "version": "4.1.2",
+    },
+    {
+        "url": "http://ftp.fr.debian.org/debian/pool/main/libc/libcoap3/",
+        "package_name": "libcoap3_4.3.1-1_amd64.deb",
+        "product": "libcoap",
+        "version": "4.3.1",
+        "other_products": ["gnutls"],
+    },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-21.02/x86_64/packages/",
+        "package_name": "libcoap2_4.2.1-1_x86_64.ipk",
+        "product": "libcoap",
+        "version": "4.2.1",
+    },
+]