fix: long version of go dependency unable to inserted into software t…

…able (CVE-2020-36569)
jeremylong · Jan 6, 2023 · e5a2f29 · e5a2f29
1 parent 21b08b3
commit e5a2f29
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/core/src/main/resources/data/upgrade_5.3.sql b/core/src/main/resources/data/upgrade_5.3.sql
@@ -0,0 +1,6 @@
+ALTER TABLE software ALTER COLUMN versionEndExcluding SET DATA TYPE VARCHAR(75);
+ALTER TABLE software ALTER COLUMN versionEndIncluding SET DATA TYPE VARCHAR(75);
+ALTER TABLE software ALTER COLUMN versionStartExcluding SET DATA TYPE VARCHAR(75);
+ALTER TABLE software ALTER COLUMN versionStartIncluding SET DATA TYPE VARCHAR(75);
+
+UPDATE Properties SET `value`='5.3' WHERE ID='version';