fix(version_compare): support + in versions (#3554)

Fixes #3552

Author: perrinjerome

cve_bin_tool/version_compare.py

@@ -44,6 +44,7 @@ def parse_version(version_string: str):
     # we could switch to a re split but it seems to leave blanks so this is less hassle
     versionString = versionString.replace("-", ".")
     versionString = versionString.replace("_", ".")
+    versionString = versionString.replace("+", ".")
     # Note: there may be other non-alphanumeric characters we want to add here in the
     # future, but we'd like to look at those cases before adding them in case the version
     # logic is very different.

test/test_version_compare.py

@@ -30,6 +30,7 @@ def test_lt(self):
         assert Version("rc5") < Version("rc10")
         assert Version("9.10") < Version("9.10.post")
         assert Version("5.3.9") < Version("5.4")
+        assert Version("2.0.0") < Version("2.0.0-1+deb9u1")
 
     def test_gt(self):
         """Make sure > works between versions, including some with unusual version schemes"""
@@ -42,6 +43,7 @@ def test_gt(self):
         assert Version("10.2.3.rc10") > Version("10.2.3.rc2")
         assert Version("9.10.post") > Version("9.10")
         assert Version("5.5") > Version("5.4.1")
+        assert Version("2.0.0-1+deb9u1") > Version("2.0.0")
 
     def test_error(self):
         """Make sure 'unknown' and blank strings raise appropriate errors"""