diff mbox series

[1/2] linux/generate-cve-exclusions.py: fix comparison

Message ID 20230821121159.3924600-1-ross.burton@arm.com
State Accepted, archived
Commit 568d65ccfb0e44ef3a40951d9da297036e7f345d
Headers show
Series [1/2] linux/generate-cve-exclusions.py: fix comparison | expand

Commit Message

Ross Burton Aug. 21, 2023, 12:11 p.m. UTC 
From: Ross Burton <ross.burton@arm.com>

The backport detection logic didn't handle issues which were backported
to the current version.

Signed-off-by: Ross Burton <ross.burton@arm.com>
---
 meta/recipes-kernel/linux/generate-cve-exclusions.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/meta/recipes-kernel/linux/generate-cve-exclusions.py b/meta/recipes-kernel/linux/generate-cve-exclusions.py
index 4d96f19fe7a..34f9ee731dc 100755
--- a/meta/recipes-kernel/linux/generate-cve-exclusions.py
+++ b/meta/recipes-kernel/linux/generate-cve-exclusions.py
@@ -70,7 +70,7 @@  def main(argp=None):
                 backport_data = stream_data[cve]
                 if base_version in backport_data:
                     backport_ver = Version(backport_data[base_version]["fixed_version"])
-                    if backport_ver < version:
+                    if backport_ver <= version:
                         print(
                             f'CVE_STATUS[{cve}] = "cpe-stable-backport: Backported in {backport_ver}"'
                         )