feat(checker): add mpd checker (#5281)

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -278,6 +278,7 @@
     "mosquitto",
     "motion",
     "mp4v2",
+    "mpd",
     "mpg123",
     "mpv",
     "msmtp",

cve_bin_tool/checkers/mpd.py

@@ -0,0 +1,20 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for mpd
+
+https://www.cvedetails.com/product/127576/Musicpd-Music-Player-Daemon.html?vendor_id=29308
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class MpdChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"Music Player Daemon ([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("musicpd", "music_player_daemon")]

test/condensed-downloads/mpd-0.24.5-1-omv2590.aarch64.rpm.tar.gz

@@ -0,0 +1,30 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {
+        "product": "music_player_daemon",
+        "version": "0.22.6",
+        "version_strings": ["Music Player Daemon 0.22.6"],
+    }
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/openmandriva/cooker/repository/aarch64/main/release/",
+        "package_name": "mpd-0.24.5-1-omv2590.aarch64.rpm",
+        "product": "music_player_daemon",
+        "version": "0.24.5",
+    },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/m/mpd/",
+        "package_name": "mpd_0.22.6-1+b1_amd64.deb",
+        "product": "music_player_daemon",
+        "version": "0.22.6",
+    },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",
+        "package_name": "mpd-mini_0.21.25-1_x86_64.ipk",
+        "product": "music_player_daemon",
+        "version": "0.21.25",
+    },
+]