feat(checker): Add gpgme Checker (#1222)

Author: BreadGenie

cve_bin_tool/checkers/__init__.py

@@ -34,6 +34,7 @@
     "gnupg",
     "gnutls",
     "glibc",
+    "gpgme",
     "gstreamer",
     "haproxy",
     "hostapd",

cve_bin_tool/checkers/gpgme.py

@@ -0,0 +1,21 @@
+# Copyright (C) 2021 Intel Corporation
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+"""
+CVE checker for gpgme
+
+https://www.cvedetails.com/product/94121/?q=Gpgme
+https://www.cvedetails.com/product/10513/GNU-Gpgme.html?vendor_id=72
+
+"""
+from cve_bin_tool.checkers import Checker
+
+
+class GpgmeChecker(Checker):
+    CONTAINS_PATTERNS = []
+    FILENAME_PATTERNS = [r"gpgme"]
+    VERSION_PATTERNS = [
+        r"This is GPGME ([0-9]+\.[0-9]+\.[0-9]+) \- The GnuPG Made Easy library",
+        r"GPGME-Tool ([0-9]+\.[0-9]+\.[0-9]+) ready",
+    ]
+    VENDOR_PRODUCT = [("gnupg", "gpgme"), ("gnu", "gpgme")]

test/condensed-downloads/gpgme-1.13.1-lp152.2.1.aarch64.rpm.tar.gz

@@ -25,6 +25,7 @@
     "glibc",
     "gnupg",
     "gnutls",
+    "gpgme",
     "gstreamer",
     "haproxy",
     "hostapd",

test/condensed-downloads/gpgme-1.16.0-1-aarch64.pkg.tar.xz.tar.gz

@@ -0,0 +1,35 @@
+# Copyright (C) 2021 Intel Corporation
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {
+        "product": "gpgme",
+        "version": "1.16.0",
+        "version_strings": [
+            "GPGME-Tool 1.16.0 ready",
+            "This is GPGME 1.16.0 - The GnuPG Made Easy library",
+        ],
+    },
+    {
+        "product": "gpgme",
+        "version": "1.13.1",
+        "version_strings": [
+            "GPGME-Tool 1.13.1 ready",
+            "This is GPGME 1.13.1 - The GnuPG Made Easy library",
+        ],
+    },
+]
+package_test_data = [
+    {
+        "url": "https://eu.mirror.archlinuxarm.org/aarch64/core/",
+        "package_name": "gpgme-1.16.0-1-aarch64.pkg.tar.xz",
+        "product": "gpgme",
+        "version": "1.16.0",
+    },
+    {
+        "url": "https://ftp.lysator.liu.se/pub/opensuse/ports/aarch64/distribution/leap/15.2/repo/oss/aarch64/",
+        "package_name": "gpgme-1.13.1-lp152.2.1.aarch64.rpm",
+        "product": "gpgme",
+        "version": "1.13.1",
+    },
+]