Describe the bug
While running version 8.0.0 using PostgreSQL the maven plugin fails due to merge_knownexploited being a function instead of a procedure. This seems to be a bug for PostgreSQL only because merge_knownexploited is declared as a procedure for Oracle, MySQL and others.
Version of dependency-check used
The problem occurs using version 8.0.0 of the maven plugin.
Log file
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:8.0.0:check (default-cli) on project product-parent: Fatal exception(s) analyzing product-parent: One or more exceptions occurred during analysis:
[ERROR] UpdateException: java.sql.BatchUpdateException: Batch entry 0 CALL merge_knownexploited('CVE-2021-27104','Accellion','FTA','Accellion FTA OS Command Injection Vulnerability','2021-11-03','Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints.','Apply updates per vendor instructions.','2021-11-17',NULL) was aborted: ERROR: merge_knownexploited(character varying, character varying, character varying, character varying, character varying, character varying, character varying, character varying, character varying) is not a procedure
To Reproduce
Steps to reproduce the behavior:
- Create an empty PostgreSQL database.
- Add missing to
initialize_postgres.sql inside of merge_knownexploited, see additional context, and execute on newly created database.
- Run dependency check maven goal.
Expected behavior
The plugin successfully executes updates and checks using PostgreSQL.
Additional context
initialize_postgres.sql also seems to be missing a semicolon inside merge_knownexploited which prevents the migration file from succeeding initially.
Describe the bug
While running version 8.0.0 using PostgreSQL the maven plugin fails due to
merge_knownexploitedbeing a function instead of a procedure. This seems to be a bug for PostgreSQL only becausemerge_knownexploitedis declared as a procedure for Oracle, MySQL and others.Version of dependency-check used
The problem occurs using version 8.0.0 of the maven plugin.
Log file
To Reproduce
Steps to reproduce the behavior:
initialize_postgres.sqlinside ofmerge_knownexploited, see additional context, and execute on newly created database.Expected behavior
The plugin successfully executes updates and checks using PostgreSQL.
Additional context
initialize_postgres.sqlalso seems to be missing a semicolon insidemerge_knownexploitedwhich prevents the migration file from succeeding initially.