`123-3ubuntu4` should be marked as ChangelogLenientMatch

[kotakanbe]

Environment

OS

• Target Server: Ubuntu Linux

Addition Details

Since the 123-3ubuntu4 pattern has the possibility of erroneous detection, This pattern should be marked as ChangelogLenientMatch

vuls/scan/debian.go

Line 582 in 1b9aafb

ver := strings.Split(versionOrLater, "ubuntu")[0]

see
https://readme.phys.ethz.ch/documentation/debian_version_numbers/

ubuntu: Package changed by Ubuntu compared to the package in Debian

    123-3ubuntu4 = Fourth Ubuntu revision of Debian's 123-3 package
    124-0ubuntu1 = Ubuntu packaged a newer upstream release before Debian, but based on the according Debian package in a way that Debian's first package may still superseed Ubuntu's package, i.e. 124-1 > 124-0ubuntu1