From 5a73b5c4bf4c3da42a3fa57edc59b91a91038190 Mon Sep 17 00:00:00 2001 From: Nadya2502 Date: Thu, 23 Apr 2026 09:16:28 +0200 Subject: [PATCH 1/2] elsdoc-209, refactored java libraries --- .../apache-commons-lang/README.md | 121 +++-- docs/els-for-libraries/apache-cxf/README.md | 123 +++--- docs/els-for-libraries/apache-kafka/README.md | 102 ++--- docs/els-for-libraries/apache-log4j/README.md | 103 ++--- .../apache-lucene-and-solr/README.md | 125 +++--- docs/els-for-libraries/apache-spark/README.md | 94 ++-- .../els-for-libraries/apache-struts/README.md | 122 +++-- .../els-for-libraries/apache-tomcat/README.md | 102 ++--- .../apache-velocity-engine/README.md | 99 ++--- docs/els-for-libraries/hibernate/README.md | 116 +++-- docs/els-for-libraries/jackson/README.md | 102 ++--- .../java-libraries/README.md | 128 +++--- docs/els-for-libraries/jetty/README.md | 102 ++--- .../managing-els-repository/README.md | 418 ++++++++++++++++++ .../postgresql-driver/README.md | 102 ++--- docs/els-for-libraries/protobuf/README.md | 106 ++--- docs/els-for-libraries/spring/README.md | 102 ++--- 17 files changed, 1227 insertions(+), 940 deletions(-) create mode 100644 docs/els-for-libraries/managing-els-repository/README.md diff --git a/docs/els-for-libraries/apache-commons-lang/README.md b/docs/els-for-libraries/apache-commons-lang/README.md index 7ceaaeffb..87b255cd6 100644 --- a/docs/els-for-libraries/apache-commons-lang/README.md +++ b/docs/els-for-libraries/apache-commons-lang/README.md @@ -7,17 +7,19 @@ TuxCare's Endless Lifecycle Support (ELS) for Apache Commons Lang provides secur * Apache Commons Lang 2.4, 2.6 * Apache Commons Lang3 3.4, 3.8.1, 3.10, 3.12.0, 3.17.0 -## Connection to ELS for Apache Commons Lang Repository +## Installation -This guide outlines the steps needed to integrate the TuxCare ELS for Apache Commons Lang repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + -### Step 1: Get user credentials +* **Maven** or **Gradle** build tool installed +* Nexus repository access credentials (username and password) — contact [sales@tuxcare.com](mailto:sales@tuxcare.com) +* To browse available artifacts, visit TuxCare [Nexus](https://nexus.repo.tuxcare.com/#browse/browse:els_java) and click Sign in in the top right corner. You may need to refresh the page after logging in. -You need a username and password in order to use the TuxCare ELS Apache Commons Lang repository. Anonymous access is disabled. To receive a username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + -### Step 2: Configure Registry + -1. Navigate to the directory depending on your operating system. +1. **Navigate to the build tool directory** * Windows ```text Maven: C:\Users\{username}\.m2 @@ -34,7 +36,7 @@ You need a username and password in order to use the TuxCare ELS Apache Commons Gradle: /home/{username}/.gradle ``` -2. Add the TuxCare repository and plugin repository to your build configuration. +2. **Configure credentials** :::tip For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. @@ -45,92 +47,72 @@ You need a username and password in order to use the TuxCare ELS Apache Commons { title: 'Gradle (~/.gradle/gradle.properties)', content: gradlecreds } ]" /> - Here `USERNAME` and `PASSWORD` are your credentials mentioned in [Step 1](#step-1-get-user-credentials). + Here `USERNAME` and `PASSWORD` are your Tuxcare credentials. -### Step 3: Update Build Configuration +3. **Add the TuxCare repository** -Add the TuxCare Apache Commons Lang repository and plugins to your build configuration: + Add the TuxCare Apache Commons Lang repository and plugins to your build configuration. - + -* To fully switch from the official Apache Commons Lang repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. + * To fully switch from the official Apache Commons Lang repository, replace it with the TuxCare repository. + * To keep both, add TuxCare after the official one. -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. + * [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) + * [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) -### Step 4: Update Dependencies +4. **Update dependencies** -Replace the Apache Commons Lang dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + Replace Apache Commons Lang dependencies with TuxCare-maintained versions. You can find artifact versions on [Nexus](https://nexus.repo.tuxcare.com/#browse/browse:els_java) — sign in with your TuxCare credentials. -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/#browse/browse:els_java). Click **Sign In** in the top right corner to authenticate with your TuxCare credentials. After logging in, you may need to refresh or reopen the link to browse artifacts due to Nexus routing behavior. - + - - - + -### Step 5: Verify and Build +5. **Verify the setup** -1. To confirm the TuxCare Apache Commons Lang repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + Use your build tool to list the project's dependencies and confirm TuxCare packages are resolved correctly. -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: +6. **Build the project** + + Include any library from the repository and run a build. -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Commons Lang repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Apache Commons Lang repository into your project. You can now benefit from the secure and vetted Apache Commons Lang libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) + The build tool should be able to identify and resolve dependencies from the TuxCare ELS for Apache Commons Lang repository. -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives and helps prioritize real risks. + -TuxCare provides VEX for Apache Commons Lang ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-lang/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-lang/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - -## Source Code - -Source code for TuxCare-patched Apache Commons Lang libraries is available in the repository. Source JARs follow the standard Maven naming convention with a `-sources` classifier. - -For example: [https://nexus.repo.tuxcare.com/repository/els_java/commons-lang/commons-lang/2.6-tuxcare.1/commons-lang-2.6-tuxcare.1-sources.jar](https://nexus.repo.tuxcare.com/repository/els_java/commons-lang/commons-lang/2.6-tuxcare.1/commons-lang-2.6-tuxcare.1-sources.jar). - -:::tip -If a source JAR is not available for a specific package, please contact [sales@tuxcare.com](mailto:sales@tuxcare.com) to report the issue. -::: ## Resolved CVEs in ELS for Apache Commons Lang @@ -138,6 +120,17 @@ If a source JAR is not available for a specific package, please contact [sales@t +## What's next? + + + +* ![](/images/shield.webp) [Available fixes](https://tuxcare.com/cve-tracker/fixes?product=Apache+Commons+Lang) — Patched versions and changelogs +* ![](/images/shield-alert.webp) [VEX feed](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-lang/) — Vulnerability Exploitability eXchange feed +* ![](/images/unlock-alt.webp) [Source code](https://nexus.repo.tuxcare.com/#browse/browse:els_java:commons-lang) — Nexus repository (credentials required) +* ![](/images/wrench.webp) [Managing the ELS repository](/els-for-libraries/managing-els-repository/) — Update to newer versions + + +