feat(checker): Add cryptsetup Checker (#1217)

Author: BreadGenie

cve_bin_tool/checkers/__init__.py

@@ -20,6 +20,7 @@
     "bubblewrap",
     "busybox",
     "bzip2",
+    "cryptsetup",
     "cups",
     "curl",
     "dnsmasq",

cve_bin_tool/checkers/cryptsetup.py

@@ -0,0 +1,21 @@
+# Copyright (C) 2021 Intel Corporation
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for cryptsetup
+
+https://www.cvedetails.com/product/35660/?q=Cryptsetup
+
+"""
+from cve_bin_tool.checkers import Checker
+
+
+class CryptsetupChecker(Checker):
+    CONTAIN_PATTERNS = [
+        r"Legacy offline reencryption already in-progress. Use cryptsetup-reencrypt utility.",
+        r"Only LUKS2 format is currently supported. Please use cryptsetup-reencrypt tool for LUKS1.",
+    ]
+    FILENAME_PATTERNS = [r"cryptsetup"]
+    VERSION_PATTERNS = [r"cryptsetup ([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("cryptsetup_project", "cryptsetup")]

test/condensed-downloads/cryptsetup-2.0.3-6.el7.aarch64.rpm.tar.gz

@@ -11,6 +11,7 @@
     "bubblewrap",
     "busybox",
     "bzip2",
+    "cryptsetup",
     "cups",
     "curl",
     "dnsmasq",

test/condensed-downloads/cryptsetup-2.3.6-1.fc35.aarch64.rpm.tar.gz

@@ -0,0 +1,37 @@
+# Copyright (C) 2021 Intel Corporation
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {
+        "product": "cryptsetup",
+        "version": "2.3.6",
+        "version_strings": [
+            "Legacy offline reencryption already in-progress. Use cryptsetup-reencrypt utility.",
+            "Only LUKS2 format is currently supported. Please use cryptsetup-reencrypt tool for LUKS1.",
+            "cryptsetup 2.3.6",
+        ],
+    },
+    {
+        "product": "cryptsetup",
+        "version": "2.0.3",
+        "version_strings": [
+            "Legacy offline reencryption already in-progress. Use cryptsetup-reencrypt utility.",
+            "Only LUKS2 format is currently supported. Please use cryptsetup-reencrypt tool for LUKS1.",
+            "cryptsetup 2.0.3",
+        ],
+    },
+]
+package_test_data = [
+    {
+        "url": "https://download-ib01.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/c/",
+        "package_name": "cryptsetup-2.3.6-1.fc35.aarch64.rpm",
+        "product": "cryptsetup",
+        "version": "2.3.6",
+    },
+    {
+        "url": " 	http://mirror.centos.org/altarch/7/os/aarch64/Packages/",
+        "package_name": "cryptsetup-2.0.3-6.el7.aarch64.rpm",
+        "product": "cryptsetup",
+        "version": "2.0.3",
+    },
+]