feat(checker): add zbar (#4981)

Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -422,6 +422,7 @@
     "xz",
     "yasm",
     "zabbix",
+    "zbar",
     "zchunk",
     "zeek",
     "zlib",

cve_bin_tool/checkers/zbar.py

@@ -0,0 +1,23 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for zbar
+
+https://www.cvedetails.com/product/160348/Zbar-Project-Zbar.html?vendor_id=32703
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class ZbarChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [
+        r"zbar[a-z\-\r\n]*([0-9]+\.[0-9]+(\.[0-9]+)?)",
+        r"([0-9]+\.[0-9]+(\.[0-9]+)?)[A-Za-z=:<'/ \(\)\-\r\n]*zbar",
+    ]
+    VENDOR_PRODUCT = [("zbar_project", "zbar")]

test/condensed-downloads/zbar-0.23-r2.apk.tar.gz

@@ -0,0 +1,26 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {"product": "zbar", "version": "0.23", "version_strings": ["0.23\nzbar"]}
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/z/",
+        "package_name": "zbar-0.23.93-6.fc42.aarch64.rpm",
+        "product": "zbar",
+        "version": "0.23.93",
+    },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/z/zbar/",
+        "package_name": "zbar-tools_0.23.90-1+deb11u1_amd64.deb",
+        "product": "zbar",
+        "version": "0.23.90",
+    },
+    {
+        "url": "https://dl-cdn.alpinelinux.org/alpine/v3.11/community/x86_64/",
+        "package_name": "zbar-0.23-r2.apk",
+        "product": "zbar",
+        "version": "0.23",
+    },
+]