fix: improve curl checker pattern (#5048)

Drop "/" from curl pattern to avoid wrongly detecting curl inside some
proprietary binaries which hardcodes "curl/7.66.0" as their User-Agent.

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/curl.py

@@ -30,5 +30,5 @@ class CurlChecker(Checker):
     FILENAME_PATTERNS = [
         r"curl",
     ]
-    VERSION_PATTERNS = [r"\r?\ncurl[ -/]([678]+\.[0-9]+\.[0-9]+)"]
+    VERSION_PATTERNS = [r"\r?\ncurl[ -]([678]+\.[0-9]+\.[0-9]+)"]
     VENDOR_PRODUCT = [("haxx", "curl")]

test/test_data/curl.py

@@ -4,7 +4,6 @@
 mapping_test_data = [
     {"product": "curl", "version": "7.34.0", "version_strings": ["curl 7.34.0"]},
     {"product": "curl", "version": "7.34.0", "version_strings": ["curl-7.34.0"]},
-    {"product": "curl", "version": "7.34.0", "version_strings": ["curl/7.34.0"]},
 ]
 package_test_data = [
     {