fix: update libuv checker (#4999)

Update libuv pattern to detect version in alpine package

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/libuv.py

@@ -18,7 +18,7 @@ class LibuvChecker(Checker):
     CONTAINS_PATTERNS: list[str] = []
     FILENAME_PATTERNS: list[str] = []
     VERSION_PATTERNS = [
-        r"(?:\n|lib)uv[a-z-_\r\n]*([0-9]+\.[0-9]+\.[0-9]+)",
-        r"([0-9]+\.[0-9]+\.[0-9]+)[a-zA-Z/_%: \-\r\n]*\r?\nUV",
+        r"(?:\n|lib|/)uv[0-9a-z_= \-\.\r\n]*\r?\n([0-9]+\.[0-9]+\.[0-9]+)\r?\n",
+        r"\r?\n([0-9]+\.[0-9]+\.[0-9]+)\r?\n[0-9a-zA-Z/_%:* \.\-\t\r\n]*(?:\nUV|libuv)",
     ]
     VENDOR_PRODUCT = [("libuv_project", "libuv"), ("libuv", "libuv")]

test/condensed-downloads/libuv-1.48.0-r0.apk.tar.gz

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 
 mapping_test_data = [
-    {"product": "libuv", "version": "1.24.1", "version_strings": ["libuv-v1.24.1"]}
+    {"product": "libuv", "version": "1.24.1", "version_strings": ["libuv\n1.24.1"]}
 ]
 package_test_data = [
     {
@@ -23,4 +23,10 @@
         "product": "libuv",
         "version": "1.40.0",
     },
+    {
+        "url": "https://dl-cdn.alpinelinux.org/alpine/v3.20/main/x86_64/",
+        "package_name": "libuv-1.48.0-r0.apk",
+        "product": "libuv",
+        "version": "1.48.0",
+    },
 ]

test/test_data/libuv.py

@@ -21,6 +21,7 @@
         "package_name": "nodejs_0.10.29~dfsg-2_amd64.deb",
         "product": "node.js",
         "version": "0.10.29",
+        "other_products": ["libuv"],
     },
     {
         "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",