From 28740ee036bff5939617acd73948e8e1bd309a97 Mon Sep 17 00:00:00 2001 From: "Felix C. Stegerman" Date: Sun, 27 Jun 2021 00:29:50 +0000 Subject: [PATCH] has_known_vulnerability(): check .so files with version in filename --- fdroidserver/update.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fdroidserver/update.py b/fdroidserver/update.py index 19e53c1c..52b89116 100644 --- a/fdroidserver/update.py +++ b/fdroidserver/update.py @@ -641,7 +641,7 @@ def has_known_vulnerability(filename): files_in_apk = set() with zipfile.ZipFile(filename) as zf: for name in zf.namelist(): - if name.endswith('libcrypto.so') or name.endswith('libssl.so'): + if name.endswith('.so') and ('libcrypto' in name or 'libssl' in name): lib = zf.open(name) while True: chunk = lib.read(4096)