diff --git a/cve_bin_tool/checkers/xml2.py b/cve_bin_tool/checkers/xml2.py index d39769236c..d11712fa14 100644 --- a/cve_bin_tool/checkers/xml2.py +++ b/cve_bin_tool/checkers/xml2.py @@ -23,7 +23,7 @@ class Xml2Checker(Checker): ] FILENAME_PATTERNS = [r"libxml2.so."] VERSION_PATTERNS: list[str] = [ - r"libxml2-([0-9]+\.[0-9]+\.[0-9]+)", - r"libxml2.so.([0-9]+\.[0-9]+\.[0-9]+)", + r"libxml2(?:-|\.so\.)([0-9]+\.[0-9]+\.[0-9]+)", + r"([0-9]+\.[0-9]+\.[0-9]+)[a-z0-9>\-\r\n]*XML_ENTITY_REF_NODE", ] VENDOR_PRODUCT = [("xmlsoft", "libxml2")] diff --git a/test/test_data/xml2.py b/test/test_data/xml2.py index 8c08600d3d..375fee02a6 100644 --- a/test/test_data/xml2.py +++ b/test/test_data/xml2.py @@ -6,7 +6,14 @@ "product": "libxml2", "version": "2.9.0", "version_strings": ["/libxml2-2.9.0/", "xmlNewElementContent : name != NULL !"], - } + }, + { + "product": "libxml2", + "version": "2.9.9", + "version_strings": [ + "20909-GITv2.9.9-rc2-2-g7c4949afa\n-->\nXML_ENTITY_REF_NODE" + ], + }, ] package_test_data = [ {