summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRoss Burton <ross.burton@arm.com>2023-08-21 13:11:58 +0100
committerRichard Purdie <richard.purdie@linuxfoundation.org>2023-08-22 15:13:51 +0100
commit568d65ccfb0e44ef3a40951d9da297036e7f345d (patch)
treefea53bb35f50f0236795cca26c546cf493603ea6
parent868a19357841470eb55fb7f1c4ab1af09dea99ed (diff)
downloadopenembedded-core-contrib-568d65ccfb0e44ef3a40951d9da297036e7f345d.tar.gz
linux/generate-cve-exclusions.py: fix comparison
The backport detection logic didn't handle issues which were backported to the current version. (From OE-Core rev: 1c7b01627b47604744f723d5eeedd455df6307e2) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rwxr-xr-xmeta/recipes-kernel/linux/generate-cve-exclusions.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/meta/recipes-kernel/linux/generate-cve-exclusions.py b/meta/recipes-kernel/linux/generate-cve-exclusions.py
index 4d96f19fe7..34f9ee731d 100755
--- a/meta/recipes-kernel/linux/generate-cve-exclusions.py
+++ b/meta/recipes-kernel/linux/generate-cve-exclusions.py
@@ -70,7 +70,7 @@ def main(argp=None):
backport_data = stream_data[cve]
if base_version in backport_data:
backport_ver = Version(backport_data[base_version]["fixed_version"])
- if backport_ver < version:
+ if backport_ver <= version:
print(
f'CVE_STATUS[{cve}] = "cpe-stable-backport: Backported in {backport_ver}"'
)