From: Ross Burton <ross.burton@arm.com>
Date: Mon, 21 Aug 2023 12:11:58 +0000 (+0100)
Subject: linux/generate-cve-exclusions.py: fix comparison
X-Git-Tag: lucaceresoli/bug-15201-perf-libtraceevent-missing~33
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=568d65ccfb0e44ef3a40951d9da297036e7f345d;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git

linux/generate-cve-exclusions.py: fix comparison

The backport detection logic didn't handle issues which were backported
to the current version.

(From OE-Core rev: 1c7b01627b47604744f723d5eeedd455df6307e2)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/recipes-kernel/linux/generate-cve-exclusions.py b/meta/recipes-kernel/linux/generate-cve-exclusions.py
index 4d96f19fe7a..34f9ee731dc 100755
--- a/meta/recipes-kernel/linux/generate-cve-exclusions.py
+++ b/meta/recipes-kernel/linux/generate-cve-exclusions.py
@@ -70,7 +70,7 @@ def main(argp=None):
                 backport_data = stream_data[cve]
                 if base_version in backport_data:
                     backport_ver = Version(backport_data[base_version]["fixed_version"])
-                    if backport_ver < version:
+                    if backport_ver <= version:
                         print(
                             f'CVE_STATUS[{cve}] = "cpe-stable-backport: Backported in {backport_ver}"'
                         )