fix: update openssl checker

Improve openssl pattern to catch version on 'exotic' openssl libraries Signed-off-by: Fabrice Fontaine <[email protected]>
ffontaine · Jan 15, 2025 · 738e06c · 738e06c
1 parent a8800da
commit 738e06c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cve_bin_tool/checkers/openssl.py b/cve_bin_tool/checkers/openssl.py
@@ -19,6 +19,6 @@ class OpensslChecker(Checker):
     FILENAME_PATTERNS = [r"libssl.so.", r"libcrypto.so"]
     VERSION_PATTERNS = [
         r"OpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+\r?\n(?:%s \(Library: %s\)|[a-zA-Z0-9:, \.\-\r\n]*OPENSSLDIR|ssl)",
-        r"%s \(Library: %s\)\r?\nOpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+",
+        r"(?:%s \(Library: %s\)\r?\n|OPENSSLDIR[a-zA-Z0-9:/ \"\-\r\n]*)OpenSSL ([0-9]+\.[0-9]+\.[0-9]+[a-z]*) [a-zA-Z0-9 ]+",
     ]
     VENDOR_PRODUCT = [("openssl", "openssl")]