fix: update xml2 pattern for android (#5439)

ffontaine · web-flow · commit 161560dd43a8 · 2025-12-10T14:37:55.000+01:00
Update xml2 pattern to catch more version inside different android
libraries

Signed-off-by: Fabrice Fontaine &lt;fabrice.fontaine@orange.com&gt;
diff --git a/cve_bin_tool/checkers/xml2.py b/cve_bin_tool/checkers/xml2.py
@@ -24,6 +24,6 @@ class Xml2Checker(Checker):
     FILENAME_PATTERNS = [r"libxml2.so."]
     VERSION_PATTERNS: list[str] = [
         r"libxml2(?:-|\.so\.)([0-9]+\.[0-9]+\.[0-9]+)",
-        r"([0-9]+\.[0-9]+\.[0-9]+)[a-z0-9>\-\r\n]*XML_ENTITY_REF_NODE",
+        r"GITv([0-9]+\.[0-9]+\.[0-9]+)[a-zA-Z0-9:> \-\r\n]*(?:xml|XML)",
     ]
     VENDOR_PRODUCT = [("xmlsoft", "libxml2")]

Original file line number	Diff line number	Diff line change
`@@ -24,6 +24,6 @@ class Xml2Checker(Checker):`
`24`	`24`	`FILENAME_PATTERNS = [r"libxml2.so."]`
`25`	`25`	`VERSION_PATTERNS: list[str] = [`
`26`	`26`	`r"libxml2(?:-\|\.so\.)([0-9]+\.[0-9]+\.[0-9]+)",`
`27`		`- r"([0-9]+\.[0-9]+\.[0-9]+)[a-z0-9>\-\r\n]*XML_ENTITY_REF_NODE",`
	`27`	`+ r"GITv([0-9]+\.[0-9]+\.[0-9]+)[a-zA-Z0-9:> \-\r\n]*(?:xml\|XML)",`
`28`	`28`	`]`
`29`	`29`	`VENDOR_PRODUCT = [("xmlsoft", "libxml2")]`