feat(checker): add openimageio checker

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -302,6 +302,7 @@
     "openafs",
     "openblas",
     "opencv",
+    "openimageio",
     "openjpeg",
     "openldap",
     "opensc",

cve_bin_tool/checkers/openimageio.py

@@ -0,0 +1,20 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for openimageio
+
+https://www.cvedetails.com/product/126860/Openimageio-Openimageio.html?vendor_id=29024
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class OpenimageioChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"OpenImageIO ([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("openimageio", "openimageio")]

test/condensed-downloads/libopenimageio2.0_2.0.5~dfsg0-1_amd64.deb.tar.gz

@@ -0,0 +1,31 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {
+        "product": "openimageio",
+        "version": "2.0.5",
+        "version_strings": ["OpenImageIO 2.0.5"],
+    }
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/mageia/distrib/cauldron/aarch64/media/core/release/",
+        "package_name": "openimageio-2.5.18.0-6.mga10.aarch64.rpm",
+        "product": "openimageio",
+        "version": "2.5.18",
+    },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/o/openimageio/",
+        "package_name": "libopenimageio2.0_2.0.5~dfsg0-1_amd64.deb",
+        "product": "openimageio",
+        "version": "2.0.5",
+    },
+    {
+        "url": "https://dl-cdn.alpinelinux.org/alpine/v3.16/community/x86_64/",
+        "package_name": "openimageio-2.3.15.0-r1.apk",
+        "product": "openimageio",
+        "version": "2.3.15",
+        "other_products": ["gcc", "libheif"],
+    },
+]