From c2ca41d7ce181783642f975277a37ae105c379b7 Mon Sep 17 00:00:00 2001 From: Sofia Boldyreva Date: Tue, 7 Oct 2025 19:13:13 +0200 Subject: [PATCH 1/7] Add new Java pages --- docs/.vuepress/components/ELSTechnology.vue | 33 ++++ docs/.vuepress/config-client/sidebar.ts | 14 +- .../apache-hadoop/README.md | 167 ++++++++++++++++++ .../apache-spark/README.md | 167 ++++++++++++++++++ .../apache-struts/README.md | 167 ++++++++++++++++++ .../dom4j/README.md | 167 ++++++++++++++++++ .../google-guava/README.md | 167 ++++++++++++++++++ .../snakeyaml/README.md | 167 ++++++++++++++++++ 8 files changed, 1045 insertions(+), 4 deletions(-) create mode 100644 docs/els-for-runtimes-and-libraries/apache-hadoop/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-spark/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-struts/README.md create mode 100644 docs/els-for-runtimes-and-libraries/dom4j/README.md create mode 100644 docs/els-for-runtimes-and-libraries/google-guava/README.md create mode 100644 docs/els-for-runtimes-and-libraries/snakeyaml/README.md diff --git a/docs/.vuepress/components/ELSTechnology.vue b/docs/.vuepress/components/ELSTechnology.vue index 887bd8d9..88319e78 100644 --- a/docs/.vuepress/components/ELSTechnology.vue +++ b/docs/.vuepress/components/ELSTechnology.vue @@ -97,134 +97,167 @@ const techData = [ { name: "Dom4j", versions: "1.6.1", + link: "./dom4j/", }, { name: "SnakeYAML", versions: "1.23 | 1.26 | 1.29 | 1.30 | 1.33", + link: "./snakeyaml/", }, { name: "Google Guava", versions: "20.0 | 30.1-jre | 31.1-jre", + link: "./google-guava/", }, { name: "Apache Hadoop", versions: "2.7.3, 2.7.1", + link: "./apache-hadoop/", }, { name: "Apache Struts", versions: "1.3.5 | 2.5.33", + link: "./apache-struts/", }, { name: "Apache Spark", versions: "2.4.8", + link: "./apache-spark/", }, { name: "Okio", versions: "2.8.0", + link: "./okio/", }, { name: "Apache Commons BeanUtils", versions: "1.9.4", + link: "./apache-commons-beanutils/", }, { name: "Apache Commons HttpClient", versions: "3.1", + link: "./apache-commons-httpclient/", }, { name: "Apache CXF", versions: "3.5.9", + link: "./apache-cxf/", }, { name: "DNSJava", versions: "2.1.7", + link: "./dnsjava/", }, { name: "el-spec", versions: "3.0.0", + link: "./el-spec/", }, { name: "Apache Hive", versions: "2.3.9", + link: "./apache-hive/", }, { name: "Apache Kafka", versions: "3.2.3", + link: "./apache-kafka/", }, { name: "Jackson", versions: "1.9.13", + link: "./jackson/", }, { name: "Logback", versions: "1.2.13", + link: "./logback/", }, { name: "Netty", versions: "4.1.115.Final | 4.1.63.Final", + link: "./netty/", }, { name: "Nimbus JOSE + JWT", versions: "9.22 | 9.24.4", + link: "./nimbus-jose-jwt/", }, { name: "Querydsl", versions: "5.1.0", + link: "./querydsl/", }, { name: "Plexus Utils", versions: "1.5.8", + link: "./plexus-utils/", }, { name: "PostgreSQL", versions: "42.5.0 | 42.2.16", + link: "./postgresql/", }, { name: "Protobuf", versions: "2.5.0" + ,link: "./protobuf/", }, { name: "Reload4j", versions: "1.2.17", + link: "./reload4j/", }, { name: "Snappy Java", versions: "1.1.8.4", + link: "./snappy-java/", }, { name: "Apache Tomcat", versions: "8.5.100 | 9.0.75", + link: "./apache-tomcat/", }, { name: "Apache Thrift", versions: "0.9.3", + link: "./apache-thrift/", }, { name: "Thymeleaf", versions: "3.0.15.RELEASE", + link: "./thymeleaf/", }, { name: "Apache Velocity Engine", versions: "1.7", + link: "./apache-velocity-engine/", }, { name: "Woodstox", versions: "5.0.3", + link: "./woodstox/", }, { name: "XMLUnit", versions: "2.9.1 | 2.9.0" + ,link: "./xmlunit/", }, { name: "Apache Santuario XML Security For Java", versions: "2.0.10 | 2.3.1", + link: "./apache-santuario-xml-security-for-java/", }, { name: "Apache Commons IO", versions: "2.7", + link: "./apache-commons-io/", }, { name: "Apache Commons Lang", versions: "2.4 | 2.6 | 3.4 | 3.10 | 3.12.0", + link: "./apache-commons-lang/", }, ], }, diff --git a/docs/.vuepress/config-client/sidebar.ts b/docs/.vuepress/config-client/sidebar.ts index 9a260a95..93820be7 100644 --- a/docs/.vuepress/config-client/sidebar.ts +++ b/docs/.vuepress/config-client/sidebar.ts @@ -49,23 +49,28 @@ export default { collapsable: false, children: [ "/els-for-runtimes-and-libraries/", + "/els-for-runtimes-and-libraries/apache-hadoop/", + "/els-for-runtimes-and-libraries/apache-spark/", + "/els-for-runtimes-and-libraries/apache-struts/", "/els-for-runtimes-and-libraries/angular/", "/els-for-runtimes-and-libraries/angularjs/", "/els-for-runtimes-and-libraries/bootstrap/", "/els-for-runtimes-and-libraries/braces/", "/els-for-runtimes-and-libraries/copy-anything/", "/els-for-runtimes-and-libraries/crypto-js/", + "/els-for-runtimes-and-libraries/dom4j/", "/els-for-runtimes-and-libraries/dompurify/", "/els-for-runtimes-and-libraries/dotnet/", "/els-for-runtimes-and-libraries/express/", "/els-for-runtimes-and-libraries/express-jwt/", "/els-for-runtimes-and-libraries/form-data/", "/els-for-runtimes-and-libraries/formidable/", + "/els-for-runtimes-and-libraries/google-guava/", "/els-for-runtimes-and-libraries/i18next/", "/els-for-runtimes-and-libraries/ip/", "/els-for-runtimes-and-libraries/jquery/", - "/els-for-runtimes-and-libraries/jsonwebtoken/", "/els-for-runtimes-and-libraries/jsonpath-plus/", + "/els-for-runtimes-and-libraries/jsonwebtoken/", "/els-for-runtimes-and-libraries/jspdf/", "/els-for-runtimes-and-libraries/lodash/", "/els-for-runtimes-and-libraries/marked/", @@ -74,20 +79,21 @@ export default { "/els-for-runtimes-and-libraries/mysql2/", "/els-for-runtimes-and-libraries/node-forge/", "/els-for-runtimes-and-libraries/openjdk/", - "/els-for-runtimes-and-libraries/ssr-window/", "/els-for-runtimes-and-libraries/php/", "/els-for-runtimes-and-libraries/picocolors/", - "/els-for-runtimes-and-libraries/python/", "/els-for-runtimes-and-libraries/python-libraries/", + "/els-for-runtimes-and-libraries/python/", "/els-for-runtimes-and-libraries/quill/", "/els-for-runtimes-and-libraries/request/", "/els-for-runtimes-and-libraries/rollup/", + "/els-for-runtimes-and-libraries/sentry-browser/", + "/els-for-runtimes-and-libraries/snakeyaml/", "/els-for-runtimes-and-libraries/spring/", + "/els-for-runtimes-and-libraries/ssr-window/", "/els-for-runtimes-and-libraries/tough-cookie/", "/els-for-runtimes-and-libraries/undici/", "/els-for-runtimes-and-libraries/vue-template-compiler/", "/els-for-runtimes-and-libraries/webpack/", - "/els-for-runtimes-and-libraries/sentry-browser/", ] }, ], diff --git a/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md b/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md new file mode 100644 index 00000000..44523c43 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md @@ -0,0 +1,167 @@ +# Apache Hadoop + +TuxCare's Endless Lifecycle Support (ELS) for Apache Hadoop provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on these versions of Apache Hadoop core components. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). +Our ELS for Apache Hadoop service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy Apache Hadoop applications. + +## Supported Versions + +* Apache Hadoop 2.7.3, 2.7.1 + +## Connection to ELS for Apache Hadoop Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Hadoop repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Hadoop repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-apache-hadoop-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + +Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Hadoop repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Hadoop repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Hadoop dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + + + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_apache-hadoop/) (anonymous access is restricted). + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Hadoop repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Hadoop repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Hadoop repository into your project. You can now benefit from the secure and vetted Apache Hadoop libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + + + diff --git a/docs/els-for-runtimes-and-libraries/apache-spark/README.md b/docs/els-for-runtimes-and-libraries/apache-spark/README.md new file mode 100644 index 00000000..53f3ac1d --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-spark/README.md @@ -0,0 +1,167 @@ +# Apache Spark + +TuxCare's Endless Lifecycle Support (ELS) for Apache Spark provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on these versions of Apache Spark core components. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). +Our ELS for Apache Spark service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy Apache Spark applications. + +## Supported Versions + +* Apache Spark 2.4.8 + +## Connection to ELS for Apache Spark Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Spark repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Spark repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-apache-spark-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + +Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Spark repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Spark repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Spark dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + + + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_apache-spark/) (anonymous access is restricted). + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Spark repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Spark repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Spark repository into your project. You can now benefit from the secure and vetted Apache Spark libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + + + diff --git a/docs/els-for-runtimes-and-libraries/apache-struts/README.md b/docs/els-for-runtimes-and-libraries/apache-struts/README.md new file mode 100644 index 00000000..61ddfba7 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-struts/README.md @@ -0,0 +1,167 @@ +# Apache Struts + +TuxCare's Endless Lifecycle Support (ELS) for Apache Struts provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on these versions of Apache Struts core components. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). +Our ELS for Apache Struts service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy Apache Struts applications. + +## Supported Versions + +* Apache Struts 1.3.5, 2.5.33 + +## Connection to ELS for Apache Struts Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Struts repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Struts repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-apache-struts-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + +Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Struts repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Struts repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Struts dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + + + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_apache-struts/) (anonymous access is restricted). + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Struts repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Struts repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Struts repository into your project. You can now benefit from the secure and vetted Apache Struts libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + + + diff --git a/docs/els-for-runtimes-and-libraries/dom4j/README.md b/docs/els-for-runtimes-and-libraries/dom4j/README.md new file mode 100644 index 00000000..114e5103 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/dom4j/README.md @@ -0,0 +1,167 @@ +# Dom4j + +TuxCare's Endless Lifecycle Support (ELS) for Dom4j provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on these versions of Dom4j core components. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). +Our ELS for Dom4j service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy Dom4j applications. + +## Supported Versions + +* Dom4j 1.6.1 + +## Connection to ELS for Dom4j Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Dom4j repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Dom4j repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-dom4j-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + +Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Dom4j repository and plugins to your build configuration: + + + +* To fully switch from the official Dom4j repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Dom4j dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + + + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_dom4j/) (anonymous access is restricted). + +### Step 5: Verify and Build + +1. To confirm the TuxCare Dom4j repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Dom4j repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Dom4j repository into your project. You can now benefit from the secure and vetted Dom4j libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/dom4j/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/dom4j/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + + + diff --git a/docs/els-for-runtimes-and-libraries/google-guava/README.md b/docs/els-for-runtimes-and-libraries/google-guava/README.md new file mode 100644 index 00000000..d4cececc --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/google-guava/README.md @@ -0,0 +1,167 @@ +# Google Guava + +TuxCare's Endless Lifecycle Support (ELS) for Google Guava provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on these versions of Google Guava core components. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). +Our ELS for Google Guava service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy Google Guava applications. + +## Supported Versions + +* Google Guava 20.0, 30.1-jre, 31.1-jre + +## Connection to ELS for Google Guava Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Google Guava repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Google Guava repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-google-guava-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + +Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Google Guava repository and plugins to your build configuration: + + + +* To fully switch from the official Google Guava repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Google Guava dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + + + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_google-guava/) (anonymous access is restricted). + +### Step 5: Verify and Build + +1. To confirm the TuxCare Google Guava repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Google Guava repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Google Guava repository into your project. You can now benefit from the secure and vetted Google Guava libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + + + diff --git a/docs/els-for-runtimes-and-libraries/snakeyaml/README.md b/docs/els-for-runtimes-and-libraries/snakeyaml/README.md new file mode 100644 index 00000000..de3ad141 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/snakeyaml/README.md @@ -0,0 +1,167 @@ +# SnakeYAML + +TuxCare's Endless Lifecycle Support (ELS) for SnakeYAML provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on these versions of SnakeYAML core components. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). +Our ELS for SnakeYAML service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy SnakeYAML applications. + +## Supported Versions + +* SnakeYAML 1.23, 1.26, 1.29, 1.30, 1.33 + +## Connection to ELS for SnakeYAML Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for SnakeYAML repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS SnakeYAML repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-snakeyaml-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + +Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare SnakeYAML repository and plugins to your build configuration: + + + +* To fully switch from the official SnakeYAML repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the SnakeYAML dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + + + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_snakeyaml/) (anonymous access is restricted). + +### Step 5: Verify and Build + +1. To confirm the TuxCare SnakeYAML repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for SnakeYAML repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for SnakeYAML repository into your project. You can now benefit from the secure and vetted SnakeYAML libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + + + From 5aa2734cef1697caa871515735fdace49b604e85 Mon Sep 17 00:00:00 2001 From: Sofia Boldyreva Date: Wed, 8 Oct 2025 20:59:53 +0200 Subject: [PATCH 2/7] Add all Java projects' pages --- docs/.vuepress/components/ELSTechnology.vue | 15 +- .../apache-commons-beanutils/README.md | 160 +++++++++++++++++ .../apache-commons-httpclient/README.md | 160 +++++++++++++++++ .../apache-commons-io/README.md | 160 +++++++++++++++++ .../apache-commons-lang/README.md | 160 +++++++++++++++++ .../apache-cxf/README.md | 154 +++++++++++++++++ .../apache-hadoop/README.md | 30 ++-- .../apache-hive/README.md | 160 +++++++++++++++++ .../apache-kafka/README.md | 160 +++++++++++++++++ .../README.md | 162 ++++++++++++++++++ .../apache-spark/README.md | 28 ++- .../apache-struts/README.md | 28 +-- .../apache-thrift/README.md | 162 ++++++++++++++++++ .../apache-velocity-engine/README.md | 162 ++++++++++++++++++ .../dnsjava/README.md | 154 +++++++++++++++++ .../dom4j/README.md | 30 ++-- .../el-spec/README.md | 154 +++++++++++++++++ .../google-guava/README.md | 30 ++-- .../jackson/README.md | 160 +++++++++++++++++ .../logback/README.md | 162 ++++++++++++++++++ .../netty/README.md | 162 ++++++++++++++++++ .../nimbus-jose-jwt/README.md | 162 ++++++++++++++++++ .../okio/README.md | 161 +++++++++++++++++ .../plexus-utils/README.md | 162 ++++++++++++++++++ .../postgresql/README.md | 162 ++++++++++++++++++ .../protobuf/README.md | 162 ++++++++++++++++++ .../querydsl/README.md | 156 +++++++++++++++++ .../reload4j/README.md | 156 +++++++++++++++++ .../snakeyaml/README.md | 36 ++-- .../snappy-java/README.md | 162 ++++++++++++++++++ .../thymeleaf/README.md | 162 ++++++++++++++++++ .../woodstox/README.md | 162 ++++++++++++++++++ .../xmlunit/README.md | 162 ++++++++++++++++++ 33 files changed, 4253 insertions(+), 105 deletions(-) create mode 100644 docs/els-for-runtimes-and-libraries/apache-commons-beanutils/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-commons-httpclient/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-commons-io/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-commons-lang/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-cxf/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-hive/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-kafka/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-santuario-xml-security-for-java/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-thrift/README.md create mode 100644 docs/els-for-runtimes-and-libraries/apache-velocity-engine/README.md create mode 100644 docs/els-for-runtimes-and-libraries/dnsjava/README.md create mode 100644 docs/els-for-runtimes-and-libraries/el-spec/README.md create mode 100644 docs/els-for-runtimes-and-libraries/jackson/README.md create mode 100644 docs/els-for-runtimes-and-libraries/logback/README.md create mode 100644 docs/els-for-runtimes-and-libraries/netty/README.md create mode 100644 docs/els-for-runtimes-and-libraries/nimbus-jose-jwt/README.md create mode 100644 docs/els-for-runtimes-and-libraries/okio/README.md create mode 100644 docs/els-for-runtimes-and-libraries/plexus-utils/README.md create mode 100644 docs/els-for-runtimes-and-libraries/postgresql/README.md create mode 100644 docs/els-for-runtimes-and-libraries/protobuf/README.md create mode 100644 docs/els-for-runtimes-and-libraries/querydsl/README.md create mode 100644 docs/els-for-runtimes-and-libraries/reload4j/README.md create mode 100644 docs/els-for-runtimes-and-libraries/snappy-java/README.md create mode 100644 docs/els-for-runtimes-and-libraries/thymeleaf/README.md create mode 100644 docs/els-for-runtimes-and-libraries/woodstox/README.md create mode 100644 docs/els-for-runtimes-and-libraries/xmlunit/README.md diff --git a/docs/.vuepress/components/ELSTechnology.vue b/docs/.vuepress/components/ELSTechnology.vue index 88319e78..8d0b5d12 100644 --- a/docs/.vuepress/components/ELSTechnology.vue +++ b/docs/.vuepress/components/ELSTechnology.vue @@ -111,7 +111,7 @@ const techData = [ }, { name: "Apache Hadoop", - versions: "2.7.3, 2.7.1", + versions: "2.7.1, 2.7.3", link: "./apache-hadoop/", }, { @@ -196,7 +196,7 @@ const techData = [ }, { name: "PostgreSQL", - versions: "42.5.0 | 42.2.16", + versions: "42.2.16 | 42.5.0", link: "./postgresql/", }, { @@ -217,7 +217,6 @@ const techData = [ { name: "Apache Tomcat", versions: "8.5.100 | 9.0.75", - link: "./apache-tomcat/", }, { name: "Apache Thrift", @@ -244,11 +243,6 @@ const techData = [ versions: "2.9.1 | 2.9.0" ,link: "./xmlunit/", }, - { - name: "Apache Santuario XML Security For Java", - versions: "2.0.10 | 2.3.1", - link: "./apache-santuario-xml-security-for-java/", - }, { name: "Apache Commons IO", versions: "2.7", @@ -259,6 +253,11 @@ const techData = [ versions: "2.4 | 2.6 | 3.4 | 3.10 | 3.12.0", link: "./apache-commons-lang/", }, + { + name: "Apache Santuario XML Security For Java", + versions: "2.0.10 | 2.3.1", + link: "./apache-santuario-xml-security-for-java/", + }, ], }, { diff --git a/docs/els-for-runtimes-and-libraries/apache-commons-beanutils/README.md b/docs/els-for-runtimes-and-libraries/apache-commons-beanutils/README.md new file mode 100644 index 00000000..fe981695 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-commons-beanutils/README.md @@ -0,0 +1,160 @@ +# Apache Commons BeanUtils + +TuxCare's Endless Lifecycle Support (ELS) for Apache Commons BeanUtils provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Apache Commons BeanUtils. + +## Supported Versions + +* Apache Commons BeanUtils 1.9.4 + +## Connection to ELS for Apache Commons BeanUtils Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Commons BeanUtils repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Commons BeanUtils repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Commons BeanUtils repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Commons BeanUtils repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Commons BeanUtils dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Commons BeanUtils repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Commons BeanUtils repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Commons BeanUtils repository into your project. You can now benefit from the secure and vetted Apache Commons BeanUtils libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Apache Commons BeanUtils ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-beanutils/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-beanutils/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/apache-commons-httpclient/README.md b/docs/els-for-runtimes-and-libraries/apache-commons-httpclient/README.md new file mode 100644 index 00000000..a2e530e6 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-commons-httpclient/README.md @@ -0,0 +1,160 @@ +# Apache Commons HttpClient + +TuxCare's Endless Lifecycle Support (ELS) for Apache Commons HttpClient provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Apache Commons HttpClient. + +## Supported Versions + +* Apache Commons HttpClient 3.1 + +## Connection to ELS for Apache Commons HttpClient Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Commons HttpClient repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Commons HttpClient repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Commons HttpClient repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Commons HttpClient repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Commons HttpClient dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Commons HttpClient repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Commons HttpClient repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Commons HttpClient repository into your project. You can now benefit from the secure and vetted Apache Commons HttpClient libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Apache Commons HttpClient ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-httpclient/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-httpclient/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/apache-commons-io/README.md b/docs/els-for-runtimes-and-libraries/apache-commons-io/README.md new file mode 100644 index 00000000..befbd31e --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-commons-io/README.md @@ -0,0 +1,160 @@ +# Apache Commons IO + +TuxCare's Endless Lifecycle Support (ELS) for Apache Commons IO provides security patches, and selected bug fixes, that are integral to the stable operation of applications using Commons IO. + +## Supported Versions + +* Apache Commons IO 2.7 + +## Connection to ELS for Apache Commons IO Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Commons IO repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Commons IO repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Commons IO repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Commons IO repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Commons IO dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Commons IO repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Commons IO repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Commons IO repository into your project. You can now benefit from the secure and vetted Apache Commons IO libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Apache Commons IO ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-io/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-io/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/apache-commons-lang/README.md b/docs/els-for-runtimes-and-libraries/apache-commons-lang/README.md new file mode 100644 index 00000000..be058faf --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-commons-lang/README.md @@ -0,0 +1,160 @@ +# Apache Commons Lang + +TuxCare's Endless Lifecycle Support (ELS) for Apache Commons Lang provides security patches, and selected bug fixes, that are integral to the stable operation of applications using Commons Lang. + +## Supported Versions + +* Apache Commons Lang 2.4, 2.6, 3.4, 3.10, 3.12.0 + +## Connection to ELS for Apache Commons Lang Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Commons Lang repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Commons Lang repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Commons Lang repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Commons Lang repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Commons Lang dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Commons Lang repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Commons Lang repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Commons Lang repository into your project. You can now benefit from the secure and vetted Apache Commons Lang libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Apache Commons Lang ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-lang/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-lang/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/apache-cxf/README.md b/docs/els-for-runtimes-and-libraries/apache-cxf/README.md new file mode 100644 index 00000000..8b12962e --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-cxf/README.md @@ -0,0 +1,154 @@ +# Apache CXF + +TuxCare's Endless Lifecycle Support (ELS) for Apache CXF provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Apache CXF. + +## Supported Versions + +* Apache CXF 3.5.9 + +## Connection to ELS for Apache CXF Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache CXF repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache CXF repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache CXF repository and plugins to your build configuration: + + + +* To fully switch from the official Apache CXF repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache CXF dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache CXF repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache CXF repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache CXF repository into your project. You can now benefit from the secure and vetted Apache CXF libraries it provides. + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md b/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md index 44523c43..fbe45e1d 100644 --- a/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md +++ b/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md @@ -5,7 +5,7 @@ Our ELS for Apache Hadoop service is designed to provide solutions for organizat ## Supported Versions -* Apache Hadoop 2.7.3, 2.7.1 +* Apache Hadoop 2.7.1, 2.7.3 ## Connection to ELS for Apache Hadoop Repository @@ -37,13 +37,13 @@ You need username and password in order to use TuxCare ELS Apache Hadoop reposit 2. Add the TuxCare repository and plugin repository to your build configuration. :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-apache-hadoop-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. ::: - + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). @@ -67,13 +67,13 @@ Example Maven and Gradle projects are available on GitHub. Remember to set the r Replace the Apache Hadoop dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_apache-hadoop/) (anonymous access is restricted). - ### Step 5: Verify and Build 1. To confirm the TuxCare Apache Hadoop repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. @@ -100,7 +100,7 @@ You've successfully integrated the TuxCare ELS for Apache Hadoop repository into VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. -TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). +TuxCare provides VEX for Apache Hadoop ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.hadoop/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.hadoop/). ## How to Upgrade to a Newer Version of TuxCare Packages @@ -114,7 +114,7 @@ const mavencreds = - tuxcare-apache-hadoop-registry + tuxcare-registry USERNAME PASSWORD @@ -122,15 +122,15 @@ const mavencreds = ` const gradlecreds = -`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_apache-hadoop/ +`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_spring/ tuxcare_registry_user=USERNAME tuxcare_registry_password=PASSWORD` const mavenrepo = ` - tuxcare-apache-hadoop-registry - https://nexus.repo.tuxcare.com/repository/els_apache-hadoop/ + tuxcare-registry + https://nexus.repo.tuxcare.com/repository/els_spring/ ` @@ -154,13 +154,13 @@ const mavendeps = org.apache.hadoop hadoop-common - 2.7.3-tuxcare.1 + 2.7.1.tuxcare.1 ` const gradledeps = `dependencies { - implementation "org.apache.hadoop:hadoop-common:2.7.3-tuxcare.1" + implementation("org.apache.hadoop:hadoop-common:2.7.1.tuxcare.1") }` diff --git a/docs/els-for-runtimes-and-libraries/apache-hive/README.md b/docs/els-for-runtimes-and-libraries/apache-hive/README.md new file mode 100644 index 00000000..422a661c --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-hive/README.md @@ -0,0 +1,160 @@ +# Apache Hive + +TuxCare's Endless Lifecycle Support (ELS) for Apache Hive provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Apache Hive. + +## Supported Versions + +* Apache Hive 2.3.9 + +## Connection to ELS for Apache Hive Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Hive repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Hive repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Hive repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Hive repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Hive dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Hive repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Hive repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Hive repository into your project. You can now benefit from the secure and vetted Apache Hive libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Apache Hive ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.hive/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.hive/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/apache-kafka/README.md b/docs/els-for-runtimes-and-libraries/apache-kafka/README.md new file mode 100644 index 00000000..2f433ec7 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-kafka/README.md @@ -0,0 +1,160 @@ +# Apache Kafka + +TuxCare's Endless Lifecycle Support (ELS) for Apache Kafka provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Apache Kafka. + +## Supported Versions + +* Apache Kafka 3.2.3 + +## Connection to ELS for Apache Kafka Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Kafka repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Kafka repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Kafka repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Kafka repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Kafka dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Kafka repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Kafka repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Kafka repository into your project. You can now benefit from the secure and vetted Apache Kafka libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Apache Kafka ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.kafka/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.kafka/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/apache-santuario-xml-security-for-java/README.md b/docs/els-for-runtimes-and-libraries/apache-santuario-xml-security-for-java/README.md new file mode 100644 index 00000000..d9f2655e --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-santuario-xml-security-for-java/README.md @@ -0,0 +1,162 @@ +# Apache Santuario XML Security for Java + +TuxCare's Endless Lifecycle Support (ELS) for Apache Santuario XML Security for Java provides security patches, and selected bug fixes, that are integral to the stable operation of applications using XML Security for Java. + +## Supported Versions + +* Apache Santuario XML Security for Java 2.0.10, 2.3.1 + +## Connection to ELS for Apache Santuario XML Security for Java Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Santuario XML Security for Java repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Santuario XML Security for Java repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Santuario XML Security for Java repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Santuario XML Security for Java repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Santuario XML Security for Java dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Santuario XML Security for Java repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Santuario XML Security for Java repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Santuario XML Security for Java repository into your project. You can now benefit from the secure and vetted Apache Santuario XML Security for Java libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Apache Santuario XML Security for Java ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.santuario/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.santuario/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/apache-spark/README.md b/docs/els-for-runtimes-and-libraries/apache-spark/README.md index 53f3ac1d..acd56c33 100644 --- a/docs/els-for-runtimes-and-libraries/apache-spark/README.md +++ b/docs/els-for-runtimes-and-libraries/apache-spark/README.md @@ -37,13 +37,13 @@ You need username and password in order to use TuxCare ELS Apache Spark reposito 2. Add the TuxCare repository and plugin repository to your build configuration. :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-apache-spark-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. ::: - + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). @@ -67,13 +67,13 @@ Example Maven and Gradle projects are available on GitHub. Remember to set the r Replace the Apache Spark dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_apache-spark/) (anonymous access is restricted). - ### Step 5: Verify and Build 1. To confirm the TuxCare Apache Spark repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. @@ -96,12 +96,6 @@ The build tool you're using should be able to identify and resolve dependencies You've successfully integrated the TuxCare ELS for Apache Spark repository into your project. You can now benefit from the secure and vetted Apache Spark libraries it provides. -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). - ## How to Upgrade to a Newer Version of TuxCare Packages If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. @@ -114,7 +108,7 @@ const mavencreds = - tuxcare-apache-spark-registry + tuxcare-registry USERNAME PASSWORD @@ -122,15 +116,15 @@ const mavencreds = ` const gradlecreds = -`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_apache-spark/ +`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_spring/ tuxcare_registry_user=USERNAME tuxcare_registry_password=PASSWORD` const mavenrepo = ` - tuxcare-apache-spark-registry - https://nexus.repo.tuxcare.com/repository/els_apache-spark/ + tuxcare-registry + https://nexus.repo.tuxcare.com/repository/els_spring/ ` diff --git a/docs/els-for-runtimes-and-libraries/apache-struts/README.md b/docs/els-for-runtimes-and-libraries/apache-struts/README.md index 61ddfba7..9079d52c 100644 --- a/docs/els-for-runtimes-and-libraries/apache-struts/README.md +++ b/docs/els-for-runtimes-and-libraries/apache-struts/README.md @@ -37,13 +37,13 @@ You need username and password in order to use TuxCare ELS Apache Struts reposit 2. Add the TuxCare repository and plugin repository to your build configuration. :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-apache-struts-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. ::: - + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). @@ -67,13 +67,13 @@ Example Maven and Gradle projects are available on GitHub. Remember to set the r Replace the Apache Struts dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_apache-struts/) (anonymous access is restricted). - ### Step 5: Verify and Build 1. To confirm the TuxCare Apache Struts repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. @@ -100,7 +100,7 @@ You've successfully integrated the TuxCare ELS for Apache Struts repository into VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. -TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). +TuxCare provides VEX for Apache Struts ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.struts/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.struts/). ## How to Upgrade to a Newer Version of TuxCare Packages @@ -114,7 +114,7 @@ const mavencreds = - tuxcare-apache-struts-registry + tuxcare-registry USERNAME PASSWORD @@ -122,15 +122,15 @@ const mavencreds = ` const gradlecreds = -`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_apache-struts/ +`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_spring/ tuxcare_registry_user=USERNAME tuxcare_registry_password=PASSWORD` const mavenrepo = ` - tuxcare-apache-struts-registry - https://nexus.repo.tuxcare.com/repository/els_apache-struts/ + tuxcare-registry + https://nexus.repo.tuxcare.com/repository/els_spring/ ` @@ -153,14 +153,14 @@ const mavendeps = ` org.apache.struts - struts2-core + struts-core 1.3.5-tuxcare.1 ` const gradledeps = `dependencies { - implementation "org.apache.struts:struts2-core:1.3.5-tuxcare.1" + implementation("org.apache.struts:struts-core:1.3.5-tuxcare.1") }` diff --git a/docs/els-for-runtimes-and-libraries/apache-thrift/README.md b/docs/els-for-runtimes-and-libraries/apache-thrift/README.md new file mode 100644 index 00000000..fbe8aa60 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-thrift/README.md @@ -0,0 +1,162 @@ +# Apache Thrift + +TuxCare's Endless Lifecycle Support (ELS) for Apache Thrift provides security patches, and selected bug fixes, that are integral to the stable operation of applications using Apache Thrift. + +## Supported Versions + +* Apache Thrift 0.9.3 + +### Connection to ELS for Thrift Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Thrift repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Thrift repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Thrift repository and plugins to your build configuration: + + + +* To fully switch from the official Thrift repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Thrift dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Thrift repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Thrift repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Thrift repository into your project. You can now benefit from the secure and vetted Thrift libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Thrift ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.thrift/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.thrift/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/apache-velocity-engine/README.md b/docs/els-for-runtimes-and-libraries/apache-velocity-engine/README.md new file mode 100644 index 00000000..a8681787 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/apache-velocity-engine/README.md @@ -0,0 +1,162 @@ +# Apache Velocity Engine + +TuxCare's Endless Lifecycle Support (ELS) for Apache Velocity Engine provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Velocity. + +## Supported Versions + +* Apache Velocity Engine 1.7 + +## Connection to ELS for Apache Velocity Engine Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Apache Velocity Engine repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Apache Velocity Engine repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Apache Velocity Engine repository and plugins to your build configuration: + + + +* To fully switch from the official Apache Velocity Engine repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Apache Velocity Engine dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Apache Velocity Engine repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Velocity Engine repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Apache Velocity Engine repository into your project. You can now benefit from the secure and vetted Apache Velocity Engine libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Apache Velocity Engine ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.velocity/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.velocity/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/dnsjava/README.md b/docs/els-for-runtimes-and-libraries/dnsjava/README.md new file mode 100644 index 00000000..56793417 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/dnsjava/README.md @@ -0,0 +1,154 @@ +# DNSJava + +TuxCare's Endless Lifecycle Support (ELS) for DNSJava provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on DNSJava. + +## Supported Versions + +* DNSJava 2.1.7 + +## Connection to ELS for DNSJava Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for DNSJava repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS DNSJava repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare DNSJava repository and plugins to your build configuration: + + + +* To fully switch from the official DNSJava repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the DNSJava dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare DNSJava repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for DNSJava repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for DNSJava repository into your project. You can now benefit from the secure and vetted DNSJava libraries it provides. + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/dom4j/README.md b/docs/els-for-runtimes-and-libraries/dom4j/README.md index 114e5103..1c31a462 100644 --- a/docs/els-for-runtimes-and-libraries/dom4j/README.md +++ b/docs/els-for-runtimes-and-libraries/dom4j/README.md @@ -37,13 +37,13 @@ You need username and password in order to use TuxCare ELS Dom4j repository. Ano 2. Add the TuxCare repository and plugin repository to your build configuration. :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-dom4j-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. ::: - + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). @@ -67,13 +67,13 @@ Example Maven and Gradle projects are available on GitHub. Remember to set the r Replace the Dom4j dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_dom4j/) (anonymous access is restricted). - ### Step 5: Verify and Build 1. To confirm the TuxCare Dom4j repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. @@ -100,7 +100,7 @@ You've successfully integrated the TuxCare ELS for Dom4j repository into your pr VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. -TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/dom4j/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/dom4j/). +TuxCare provides VEX for Dom4j ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/dom4j/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/dom4j/). ## How to Upgrade to a Newer Version of TuxCare Packages @@ -114,7 +114,7 @@ const mavencreds = - tuxcare-dom4j-registry + tuxcare-registry USERNAME PASSWORD @@ -122,15 +122,15 @@ const mavencreds = ` const gradlecreds = -`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_dom4j/ +`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_spring/ tuxcare_registry_user=USERNAME tuxcare_registry_password=PASSWORD` const mavenrepo = ` - tuxcare-dom4j-registry - https://nexus.repo.tuxcare.com/repository/els_dom4j/ + tuxcare-registry + https://nexus.repo.tuxcare.com/repository/els_spring/ ` @@ -152,15 +152,15 @@ const gradlerepo = const mavendeps = ` - org.dom4j + dom4j dom4j - 1.6.1-tuxcare.1 + 1.6.1.tuxcare.1 ` const gradledeps = `dependencies { - implementation "org.dom4j:dom4j:1.6.1-tuxcare.1" + implementation "dom4j:dom4j:1.6.1.tuxcare.1" }` diff --git a/docs/els-for-runtimes-and-libraries/el-spec/README.md b/docs/els-for-runtimes-and-libraries/el-spec/README.md new file mode 100644 index 00000000..82394cef --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/el-spec/README.md @@ -0,0 +1,154 @@ +# el-spec + +TuxCare's Endless Lifecycle Support (ELS) for el-spec provides security patches, and selected bug fixes, that are integral to the stable operation of applications depending on the Expression Language specification. + +## Supported Versions + +* el-spec 3.0.0 + +## Connection to ELS for el-spec Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for el-spec repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS el-spec repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare el-spec repository and plugins to your build configuration: + + + +* To fully switch from the official el-spec repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the el-spec dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare el-spec repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for el-spec repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for el-spec repository into your project. You can now benefit from the secure and vetted el-spec libraries it provides. + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/google-guava/README.md b/docs/els-for-runtimes-and-libraries/google-guava/README.md index d4cececc..3f8365b0 100644 --- a/docs/els-for-runtimes-and-libraries/google-guava/README.md +++ b/docs/els-for-runtimes-and-libraries/google-guava/README.md @@ -37,15 +37,15 @@ You need username and password in order to use TuxCare ELS Google Guava reposito 2. Add the TuxCare repository and plugin repository to your build configuration. :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-google-guava-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. ::: - + -Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). ### Step 3: Update Build Configuration @@ -67,13 +67,13 @@ Example Maven and Gradle projects are available on GitHub. Remember to set the r Replace the Google Guava dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_google-guava/) (anonymous access is restricted). - ### Step 5: Verify and Build 1. To confirm the TuxCare Google Guava repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. @@ -100,7 +100,7 @@ You've successfully integrated the TuxCare ELS for Google Guava repository into VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. -TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). +TuxCare provides VEX for Google Guava ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/com.google.guava/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/com.google.guava/). ## How to Upgrade to a Newer Version of TuxCare Packages @@ -114,7 +114,7 @@ const mavencreds = - tuxcare-google-guava-registry + tuxcare-registry USERNAME PASSWORD @@ -122,15 +122,15 @@ const mavencreds = ` const gradlecreds = -`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_google-guava/ +`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_spring/ tuxcare_registry_user=USERNAME tuxcare_registry_password=PASSWORD` const mavenrepo = ` - tuxcare-google-guava-registry - https://nexus.repo.tuxcare.com/repository/els_google-guava/ + tuxcare-registry + https://nexus.repo.tuxcare.com/repository/els_spring/ ` @@ -154,13 +154,13 @@ const mavendeps = com.google.guava guava - 31.1-jre-tuxcare.1 + 31.1-jre.tuxcare.1 ` const gradledeps = `dependencies { - implementation "com.google.guava:guava:31.1-jre-tuxcare.1" + implementation("com.google.guava:guava:31.1-jre.tuxcare.1") }` diff --git a/docs/els-for-runtimes-and-libraries/jackson/README.md b/docs/els-for-runtimes-and-libraries/jackson/README.md new file mode 100644 index 00000000..83106edc --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/jackson/README.md @@ -0,0 +1,160 @@ +# Jackson + +TuxCare's Endless Lifecycle Support (ELS) for Jackson provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Jackson. + +## Supported Versions + +* Jackson 1.9.13 + +## Connection to ELS for Jackson Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Jackson repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your Maven and Gradle projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Jackson repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Jackson repository and plugins to your build configuration: + + + +* To fully switch from the official Jackson repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Jackson dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Jackson repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Jackson repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Jackson repository into your project. You can now benefit from the secure and vetted Jackson libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Jackson ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.codehaus.jackson/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.codehaus.jackson/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/logback/README.md b/docs/els-for-runtimes-and-libraries/logback/README.md new file mode 100644 index 00000000..832772ad --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/logback/README.md @@ -0,0 +1,162 @@ +# Logback + +TuxCare's Endless Lifecycle Support (ELS) for Logback provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Logback. + +## Supported Versions + +* Logback 1.2.13 + +## Connection to ELS for Logback Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Logback repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Logback repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Logback repository and plugins to your build configuration: + + + +* To fully switch from the official Logback repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Logback dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Logback repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Logback repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Logback repository into your project. You can now benefit from the secure and vetted Logback libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Logback ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/ch.qos.logback/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/ch.qos.logback/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/netty/README.md b/docs/els-for-runtimes-and-libraries/netty/README.md new file mode 100644 index 00000000..13a925ac --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/netty/README.md @@ -0,0 +1,162 @@ +# Netty + +TuxCare's Endless Lifecycle Support (ELS) for Netty provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Netty. + +## Supported Versions + +* Netty 4.1.115.Final, 4.1.63.Final + +## Connection to ELS for Netty Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Netty repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Netty repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Netty repository and plugins to your build configuration: + + + +* To fully switch from the official Netty repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Netty dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Netty repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Netty repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Netty repository into your project. You can now benefit from the secure and vetted Netty libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Netty ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/io.netty/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/io.netty/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/nimbus-jose-jwt/README.md b/docs/els-for-runtimes-and-libraries/nimbus-jose-jwt/README.md new file mode 100644 index 00000000..5ee82928 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/nimbus-jose-jwt/README.md @@ -0,0 +1,162 @@ +# Nimbus JOSE + JWT + +TuxCare's Endless Lifecycle Support (ELS) for Nimbus JOSE + JWT provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Nimbus JOSE + JWT. + +## Supported Versions + +* Nimbus JOSE + JWT 9.22, 9.24.4 + +## Connection to ELS for Nimbus JOSE + JWT Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Nimbus JOSE + JWT repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Nimbus JOSE + JWT repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Nimbus JOSE + JWT repository and plugins to your build configuration: + + + +* To fully switch from the official Nimbus JOSE + JWT repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Nimbus JOSE + JWT dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Nimbus JOSE + JWT repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Nimbus JOSE + JWT repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Nimbus JOSE + JWT repository into your project. You can now benefit from the secure and vetted Nimbus JOSE + JWT libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Nimbus JOSE + JWT ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/com.nimbusds/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/com.nimbusds/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/okio/README.md b/docs/els-for-runtimes-and-libraries/okio/README.md new file mode 100644 index 00000000..95df3b8f --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/okio/README.md @@ -0,0 +1,161 @@ +# Okio + +TuxCare's Endless Lifecycle Support (ELS) for Okio provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Okio. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). +Our ELS for Okio service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy Okio applications. + +## Supported Versions + +* Okio 2.8.0 + +## Connection to ELS for Okio Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Okio repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Okio repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Okio repository and plugins to your build configuration: + + + +* To fully switch from the official Okio repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Okio dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Okio repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Okio repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Okio repository into your project. You can now benefit from the secure and vetted Okio libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Okio ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/com.squareup.okio/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/com.squareup.okio/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + diff --git a/docs/els-for-runtimes-and-libraries/plexus-utils/README.md b/docs/els-for-runtimes-and-libraries/plexus-utils/README.md new file mode 100644 index 00000000..296e7d54 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/plexus-utils/README.md @@ -0,0 +1,162 @@ +# Plexus Utils + +TuxCare's Endless Lifecycle Support (ELS) for Plexus Utils provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Plexus Utils. + +## Supported Versions + +* Plexus Utils 1.5.8 + +## Connection to ELS for Plexus Utils Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Plexus Utils repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Plexus Utils repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Plexus Utils repository and plugins to your build configuration: + + + +* To fully switch from the official Plexus Utils repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Plexus Utils dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Plexus Utils repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Plexus Utils repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Plexus Utils repository into your project. You can now benefit from the secure and vetted Plexus Utils libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Plexus Utils ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.codehaus.plexus/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.codehaus.plexus/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/postgresql/README.md b/docs/els-for-runtimes-and-libraries/postgresql/README.md new file mode 100644 index 00000000..57b83eca --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/postgresql/README.md @@ -0,0 +1,162 @@ +# PostgreSQL + +TuxCare's Endless Lifecycle Support (ELS) for PostgreSQL provides security patches, and selected bug fixes, that are integral to the stable operation of applications using the PostgreSQL driver. + +## Supported Versions + +* PostgreSQL 42.2.16, 42.5.0 + +## Connection to ELS for PostgreSQL Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for PostgreSQL repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS PostgreSQL repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare PostgreSQL repository and plugins to your build configuration: + + + +* To fully switch from the official PostgreSQL repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the PostgreSQL dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare PostgreSQL repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for PostgreSQL repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for PostgreSQL repository into your project. You can now benefit from the secure and vetted PostgreSQL libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for PostgreSQL ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.postgresql/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.postgresql/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/protobuf/README.md b/docs/els-for-runtimes-and-libraries/protobuf/README.md new file mode 100644 index 00000000..bd20e239 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/protobuf/README.md @@ -0,0 +1,162 @@ +# Protobuf + +TuxCare's Endless Lifecycle Support (ELS) for Protobuf provides security patches, and selected bug fixes, that are integral to the stable operation of applications using Google Protocol Buffers. + +## Supported Versions + +* Protobuf 2.5.0 + +## Connection to ELS for Protobuf Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Protobuf repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Protobuf repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Protobuf repository and plugins to your build configuration: + + + +* To fully switch from the official Protobuf repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Protobuf dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Protobuf repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Protobuf repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Protobuf repository into your project. You can now benefit from the secure and vetted Protobuf libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Protobuf ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/com.google.protobuf/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/com.google.protobuf/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/querydsl/README.md b/docs/els-for-runtimes-and-libraries/querydsl/README.md new file mode 100644 index 00000000..d54dba70 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/querydsl/README.md @@ -0,0 +1,156 @@ +# Querydsl + +TuxCare's Endless Lifecycle Support (ELS) for Querydsl provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Querydsl. + +## Supported Versions + +* Querydsl 5.1.0 + +## Connection to ELS for Querydsl Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Querydsl repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Querydsl repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Querydsl repository and plugins to your build configuration: + + + +* To fully switch from the official Querydsl repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Querydsl dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Querydsl repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Querydsl repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Querydsl repository into your project. You can now benefit from the secure and vetted Querydsl libraries it provides. + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/reload4j/README.md b/docs/els-for-runtimes-and-libraries/reload4j/README.md new file mode 100644 index 00000000..377f0f65 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/reload4j/README.md @@ -0,0 +1,156 @@ +# Reload4j + +TuxCare's Endless Lifecycle Support (ELS) for Reload4j provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Reload4j. + +## Supported Versions + +* Reload4j 1.2.17 + +## Connection to ELS for Reload4j Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Reload4j repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Reload4j repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Reload4j repository and plugins to your build configuration: + + + +* To fully switch from the official Reload4j repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Reload4j dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Reload4j repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Reload4j repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Reload4j repository into your project. You can now benefit from the secure and vetted Reload4j libraries it provides. + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/snakeyaml/README.md b/docs/els-for-runtimes-and-libraries/snakeyaml/README.md index de3ad141..d8adaa43 100644 --- a/docs/els-for-runtimes-and-libraries/snakeyaml/README.md +++ b/docs/els-for-runtimes-and-libraries/snakeyaml/README.md @@ -37,13 +37,13 @@ You need username and password in order to use TuxCare ELS SnakeYAML repository. 2. Add the TuxCare repository and plugin repository to your build configuration. :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-snakeyaml-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. ::: - + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). @@ -67,13 +67,13 @@ Example Maven and Gradle projects are available on GitHub. Remember to set the r Replace the SnakeYAML dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_snakeyaml/) (anonymous access is restricted). - ### Step 5: Verify and Build 1. To confirm the TuxCare SnakeYAML repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. @@ -96,12 +96,6 @@ The build tool you're using should be able to identify and resolve dependencies You've successfully integrated the TuxCare ELS for SnakeYAML repository into your project. You can now benefit from the secure and vetted SnakeYAML libraries it provides. -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Lodash ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). - ## How to Upgrade to a Newer Version of TuxCare Packages If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. @@ -114,7 +108,7 @@ const mavencreds = - tuxcare-snakeyaml-registry + tuxcare-registry USERNAME PASSWORD @@ -122,15 +116,15 @@ const mavencreds = ` const gradlecreds = -`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_snakeyaml/ +`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_spring/ tuxcare_registry_user=USERNAME tuxcare_registry_password=PASSWORD` const mavenrepo = ` - tuxcare-snakeyaml-registry - https://nexus.repo.tuxcare.com/repository/els_snakeyaml/ + tuxcare-registry + https://nexus.repo.tuxcare.com/repository/els_spring/ ` @@ -152,15 +146,15 @@ const gradlerepo = const mavendeps = ` - org.yaml - snakeyaml - 1.33-tuxcare.1 + org.tuxcare.snakeyaml + snakeyaml-dependencies-tuxcare + 1.23.tuxcare.1 ` const gradledeps = `dependencies { - implementation "org.yaml:snakeyaml:1.33-tuxcare.1" + implementation("org.tuxcare.snakeyaml:snakeyaml-dependencies-tuxcare:1.23.tuxcare.1") }` diff --git a/docs/els-for-runtimes-and-libraries/snappy-java/README.md b/docs/els-for-runtimes-and-libraries/snappy-java/README.md new file mode 100644 index 00000000..31ca8445 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/snappy-java/README.md @@ -0,0 +1,162 @@ +# Snappy Java + +TuxCare's Endless Lifecycle Support (ELS) for Snappy Java provides security patches, and selected bug fixes, that are integral to the stable operation of applications using Snappy Java. + +## Supported Versions + +* Snappy Java 1.1.8.4 + +## Connection to ELS for Snappy Java Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Snappy Java repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Snappy Java repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Snappy Java repository and plugins to your build configuration: + + + +* To fully switch from the official Snappy Java repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Snappy Java dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Snappy Java repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Snappy Java repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Snappy Java repository into your project. You can now benefit from the secure and vetted Snappy Java libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Snappy Java ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.xerial.snappy/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.xerial.snappy/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/thymeleaf/README.md b/docs/els-for-runtimes-and-libraries/thymeleaf/README.md new file mode 100644 index 00000000..63810e33 --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/thymeleaf/README.md @@ -0,0 +1,162 @@ +# Thymeleaf + +TuxCare's Endless Lifecycle Support (ELS) for Thymeleaf provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Thymeleaf. + +## Supported Versions + +* Thymeleaf 3.0.15.RELEASE + +## Connection to ELS for Thymeleaf Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Thymeleaf repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Thymeleaf repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Thymeleaf repository and plugins to your build configuration: + + + +* To fully switch from the official Thymeleaf repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Thymeleaf dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Thymeleaf repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Thymeleaf repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Thymeleaf repository into your project. You can now benefit from the secure and vetted Thymeleaf libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Thymeleaf ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.thymeleaf/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.thymeleaf/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/woodstox/README.md b/docs/els-for-runtimes-and-libraries/woodstox/README.md new file mode 100644 index 00000000..0e89bdfc --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/woodstox/README.md @@ -0,0 +1,162 @@ +# Woodstox + +TuxCare's Endless Lifecycle Support (ELS) for Woodstox provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Woodstox. + +## Supported Versions + +* Woodstox 5.0.3 + +## Connection to ELS for Woodstox Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Woodstox repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS Woodstox repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare Woodstox repository and plugins to your build configuration: + + + +* To fully switch from the official Woodstox repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the Woodstox dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare Woodstox repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Woodstox repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for Woodstox repository into your project. You can now benefit from the secure and vetted Woodstox libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for Woodstox ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/com.fasterxml.woodstox/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/com.fasterxml.woodstox/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + diff --git a/docs/els-for-runtimes-and-libraries/xmlunit/README.md b/docs/els-for-runtimes-and-libraries/xmlunit/README.md new file mode 100644 index 00000000..2e6b7aea --- /dev/null +++ b/docs/els-for-runtimes-and-libraries/xmlunit/README.md @@ -0,0 +1,162 @@ +# XMLUnit + +TuxCare's Endless Lifecycle Support (ELS) for XMLUnit provides security patches, and selected bug fixes, that are integral to the stable operation of applications using XMLUnit. + +## Supported Versions + +* XMLUnit 2.9.1, 2.9.0 + +## Connection to ELS for XMLUnit Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for XMLUnit repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. + +### Step 1: Get user credentials + +You need username and password in order to use TuxCare ELS XMLUnit repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). + +### Step 2: Configure Registry + +1. Navigate to the directory depending on your operating system. + * Windows + ```text + Maven: C:\Users\{username}\.m2 + Gradle: C:\Users\{username}\.gradle + ``` + * macOS + ```text + Maven: /Users/{username}/.m2 + Gradle: /Users/{username}/.gradle + ``` + * Linux + ```text + Maven: /home/{username}/.m2 + Gradle: /home/{username}/.gradle + ``` + +2. Add the TuxCare repository and plugin repository to your build configuration. + + :::tip + For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. + ::: + + + + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). + +### Step 3: Update Build Configuration + +Add the TuxCare XMLUnit repository and plugins to your build configuration: + + + +* To fully switch from the official XMLUnit repository, replace it with the TuxCare repository. +* To keep both, add TuxCare after the official one. + +Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. +* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) +* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) + +### Step 4: Update Dependencies + +Replace the XMLUnit dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. + +You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). + + + +### Step 5: Verify and Build + +1. To confirm the TuxCare XMLUnit repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. + + + +2. After reviewing the dependencies, include any library from the repository into your project and then run a build: + + + +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for XMLUnit repository. + +### Conclusion + +You've successfully integrated the TuxCare ELS for XMLUnit repository into your project. You can now benefit from the secure and vetted XMLUnit libraries it provides. + +## Vulnerability Exploitability eXchange (VEX) + +VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. + +TuxCare provides VEX for XMLUnit ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.xmlunit/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.xmlunit/). + +## How to Upgrade to a Newer Version of TuxCare Packages + +If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. + + + + From 722253d7256d3b9c2a6b696f63a93218265308c3 Mon Sep 17 00:00:00 2001 From: Sofia Boldyreva Date: Tue, 14 Oct 2025 16:55:17 +0200 Subject: [PATCH 3/7] post-review update --- docs/.vuepress/components/ELSTechnology.vue | 48 ++--- docs/.vuepress/config-client/sidebar.ts | 40 +++++ .../apache-commons-beanutils/README.md | 160 ----------------- .../apache-commons-httpclient/README.md | 160 ----------------- .../apache-commons-io/README.md | 160 ----------------- .../apache-cxf/README.md | 154 ---------------- .../apache-hive/README.md | 160 ----------------- .../README.md | 162 ----------------- .../apache-thrift/README.md | 162 ----------------- .../apache-velocity-engine/README.md | 162 ----------------- .../dnsjava/README.md | 154 ---------------- .../el-spec/README.md | 154 ---------------- .../google-guava/README.md | 167 ------------------ .../{dom4j => java-libraries}/README.md | 91 ++++++---- .../logback/README.md | 162 ----------------- .../netty/README.md | 162 ----------------- .../nimbus-jose-jwt/README.md | 162 ----------------- .../okio/README.md | 161 ----------------- .../plexus-utils/README.md | 162 ----------------- .../querydsl/README.md | 156 ---------------- .../reload4j/README.md | 156 ---------------- .../snakeyaml/README.md | 161 ----------------- .../snappy-java/README.md | 162 ----------------- .../thymeleaf/README.md | 162 ----------------- .../woodstox/README.md | 162 ----------------- .../xmlunit/README.md | 162 ----------------- 26 files changed, 122 insertions(+), 3742 deletions(-) delete mode 100644 docs/els-for-runtimes-and-libraries/apache-commons-beanutils/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/apache-commons-httpclient/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/apache-commons-io/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/apache-cxf/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/apache-hive/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/apache-santuario-xml-security-for-java/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/apache-thrift/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/apache-velocity-engine/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/dnsjava/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/el-spec/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/google-guava/README.md rename docs/els-for-runtimes-and-libraries/{dom4j => java-libraries}/README.md (54%) delete mode 100644 docs/els-for-runtimes-and-libraries/logback/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/netty/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/nimbus-jose-jwt/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/okio/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/plexus-utils/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/querydsl/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/reload4j/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/snakeyaml/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/snappy-java/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/thymeleaf/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/woodstox/README.md delete mode 100644 docs/els-for-runtimes-and-libraries/xmlunit/README.md diff --git a/docs/.vuepress/components/ELSTechnology.vue b/docs/.vuepress/components/ELSTechnology.vue index ff155229..5e760874 100644 --- a/docs/.vuepress/components/ELSTechnology.vue +++ b/docs/.vuepress/components/ELSTechnology.vue @@ -97,17 +97,17 @@ const techData = [ { name: "Dom4j", versions: "1.6.1", - link: "./dom4j/", + link: "./java-libraries/", }, { name: "SnakeYAML", versions: "1.23 | 1.26 | 1.29 | 1.30 | 1.33", - link: "./snakeyaml/", + link: "./java-libraries/", }, { name: "Google Guava", versions: "20.0 | 30.1-jre | 31.1-jre", - link: "./google-guava/", + link: "./java-libraries/", }, { name: "Apache Hadoop", @@ -127,37 +127,37 @@ const techData = [ { name: "Okio", versions: "2.8.0", - link: "./okio/", + link: "./java-libraries/", }, { name: "Apache Commons BeanUtils", versions: "1.9.4", - link: "./apache-commons-beanutils/", + link: "./java-libraries/", }, { name: "Apache Commons HttpClient", versions: "3.1", - link: "./apache-commons-httpclient/", + link: "./java-librariest/", }, { name: "Apache CXF", versions: "3.5.9", - link: "./apache-cxf/", + link: "./java-libraries/", }, { name: "DNSJava", versions: "2.1.7", - link: "./dnsjava/", + link: "./java-libraries/", }, { name: "el-spec", versions: "3.0.0", - link: "./el-spec/", + link: "./java-libraries/", }, { name: "Apache Hive", versions: "2.3.9", - link: "./apache-hive/", + link: "./java-libraries/", }, { name: "Apache Kafka", @@ -172,27 +172,27 @@ const techData = [ { name: "Logback", versions: "1.2.13", - link: "./logback/", + link: "./java-libraries/", }, { name: "Netty", versions: "4.1.115.Final | 4.1.63.Final", - link: "./netty/", + link: "./java-libraries/", }, { name: "Nimbus JOSE + JWT", versions: "9.22 | 9.24.4", - link: "./nimbus-jose-jwt/", + link: "./java-libraries/", }, { name: "Querydsl", versions: "5.1.0", - link: "./querydsl/", + link: "./java-libraries/", }, { name: "Plexus Utils", versions: "1.5.8", - link: "./plexus-utils/", + link: "./java-libraries/", }, { name: "PostgreSQL", @@ -207,12 +207,12 @@ const techData = [ { name: "Reload4j", versions: "1.2.17", - link: "./reload4j/", + link: "./java-libraries/", }, { name: "Snappy Java", versions: "1.1.8.4", - link: "./snappy-java/", + link: "./java-libraries/", }, { name: "Apache Tomcat", @@ -221,32 +221,32 @@ const techData = [ { name: "Apache Thrift", versions: "0.9.3", - link: "./apache-thrift/", + link: "./java-libraries/", }, { name: "Thymeleaf", versions: "3.0.15.RELEASE", - link: "./thymeleaf/", + link: "./java-libraries/", }, { name: "Apache Velocity Engine", versions: "1.7", - link: "./apache-velocity-engine/", + link: "./java-libraries/", }, { name: "Woodstox", versions: "5.0.3", - link: "./woodstox/", + link: "./java-libraries/", }, { name: "XMLUnit", versions: "2.9.1 | 2.9.0" - ,link: "./xmlunit/", + ,link: "./java-libraries/", }, { name: "Apache Commons IO", versions: "2.7", - link: "./apache-commons-io/", + link: "./java-libraries/", }, { name: "Apache Commons Lang", @@ -256,7 +256,7 @@ const techData = [ { name: "Apache Santuario XML Security For Java", versions: "2.0.10 | 2.3.1", - link: "./apache-santuario-xml-security-for-java/", + link: "./java-libraries/", }, ], }, diff --git a/docs/.vuepress/config-client/sidebar.ts b/docs/.vuepress/config-client/sidebar.ts index e993026f..87bd45db 100644 --- a/docs/.vuepress/config-client/sidebar.ts +++ b/docs/.vuepress/config-client/sidebar.ts @@ -63,6 +63,46 @@ export default { path: '/els-for-runtimes-and-libraries/openjdk/', icon: '/images/openjdk-logo.png', }, + { + path: '/els-for-runtimes-and-libraries/apache-hadoop/', + icon: '/images/java.png', + }, + { + path: '/els-for-runtimes-and-libraries/apache-struts/', + icon: '/images/java.png', + }, + { + path: '/els-for-runtimes-and-libraries/apache-spark/', + icon: '/images/java.png', + }, + { + path: '/els-for-runtimes-and-libraries/apache-kafka/', + icon: '/images/java.png', + }, + { + path: '/els-for-runtimes-and-libraries/apache-velocity-engine/', + icon: '/images/java.png', + }, + { + path: '/els-for-runtimes-and-libraries/postgresql/', + icon: '/images/java.png', + }, + { + path: '/els-for-runtimes-and-libraries/protobuf/', + icon: '/images/java.png', + }, + { + path: '/els-for-runtimes-and-libraries/jackson/', + icon: '/images/java.png', + }, + { + path: '/els-for-runtimes-and-libraries/apache-commons-lang/', + icon: '/images/java.png', + }, + { + path: '/els-for-runtimes-and-libraries/java-libraries/', + icon: '/images/java.png', + }, { title: 'Python', type: 'section-header', diff --git a/docs/els-for-runtimes-and-libraries/apache-commons-beanutils/README.md b/docs/els-for-runtimes-and-libraries/apache-commons-beanutils/README.md deleted file mode 100644 index fe981695..00000000 --- a/docs/els-for-runtimes-and-libraries/apache-commons-beanutils/README.md +++ /dev/null @@ -1,160 +0,0 @@ -# Apache Commons BeanUtils - -TuxCare's Endless Lifecycle Support (ELS) for Apache Commons BeanUtils provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Apache Commons BeanUtils. - -## Supported Versions - -* Apache Commons BeanUtils 1.9.4 - -## Connection to ELS for Apache Commons BeanUtils Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Apache Commons BeanUtils repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Apache Commons BeanUtils repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Apache Commons BeanUtils repository and plugins to your build configuration: - - - -* To fully switch from the official Apache Commons BeanUtils repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Apache Commons BeanUtils dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Apache Commons BeanUtils repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Commons BeanUtils repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Apache Commons BeanUtils repository into your project. You can now benefit from the secure and vetted Apache Commons BeanUtils libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Apache Commons BeanUtils ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-beanutils/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-beanutils/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - diff --git a/docs/els-for-runtimes-and-libraries/apache-commons-httpclient/README.md b/docs/els-for-runtimes-and-libraries/apache-commons-httpclient/README.md deleted file mode 100644 index a2e530e6..00000000 --- a/docs/els-for-runtimes-and-libraries/apache-commons-httpclient/README.md +++ /dev/null @@ -1,160 +0,0 @@ -# Apache Commons HttpClient - -TuxCare's Endless Lifecycle Support (ELS) for Apache Commons HttpClient provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Apache Commons HttpClient. - -## Supported Versions - -* Apache Commons HttpClient 3.1 - -## Connection to ELS for Apache Commons HttpClient Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Apache Commons HttpClient repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Apache Commons HttpClient repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Apache Commons HttpClient repository and plugins to your build configuration: - - - -* To fully switch from the official Apache Commons HttpClient repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Apache Commons HttpClient dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Apache Commons HttpClient repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Commons HttpClient repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Apache Commons HttpClient repository into your project. You can now benefit from the secure and vetted Apache Commons HttpClient libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Apache Commons HttpClient ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-httpclient/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-httpclient/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - diff --git a/docs/els-for-runtimes-and-libraries/apache-commons-io/README.md b/docs/els-for-runtimes-and-libraries/apache-commons-io/README.md deleted file mode 100644 index befbd31e..00000000 --- a/docs/els-for-runtimes-and-libraries/apache-commons-io/README.md +++ /dev/null @@ -1,160 +0,0 @@ -# Apache Commons IO - -TuxCare's Endless Lifecycle Support (ELS) for Apache Commons IO provides security patches, and selected bug fixes, that are integral to the stable operation of applications using Commons IO. - -## Supported Versions - -* Apache Commons IO 2.7 - -## Connection to ELS for Apache Commons IO Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Apache Commons IO repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Apache Commons IO repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Apache Commons IO repository and plugins to your build configuration: - - - -* To fully switch from the official Apache Commons IO repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Apache Commons IO dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Apache Commons IO repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Commons IO repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Apache Commons IO repository into your project. You can now benefit from the secure and vetted Apache Commons IO libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Apache Commons IO ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-io/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/commons-io/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - diff --git a/docs/els-for-runtimes-and-libraries/apache-cxf/README.md b/docs/els-for-runtimes-and-libraries/apache-cxf/README.md deleted file mode 100644 index 8b12962e..00000000 --- a/docs/els-for-runtimes-and-libraries/apache-cxf/README.md +++ /dev/null @@ -1,154 +0,0 @@ -# Apache CXF - -TuxCare's Endless Lifecycle Support (ELS) for Apache CXF provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Apache CXF. - -## Supported Versions - -* Apache CXF 3.5.9 - -## Connection to ELS for Apache CXF Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Apache CXF repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Apache CXF repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Apache CXF repository and plugins to your build configuration: - - - -* To fully switch from the official Apache CXF repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Apache CXF dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Apache CXF repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache CXF repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Apache CXF repository into your project. You can now benefit from the secure and vetted Apache CXF libraries it provides. - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - diff --git a/docs/els-for-runtimes-and-libraries/apache-hive/README.md b/docs/els-for-runtimes-and-libraries/apache-hive/README.md deleted file mode 100644 index 422a661c..00000000 --- a/docs/els-for-runtimes-and-libraries/apache-hive/README.md +++ /dev/null @@ -1,160 +0,0 @@ -# Apache Hive - -TuxCare's Endless Lifecycle Support (ELS) for Apache Hive provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Apache Hive. - -## Supported Versions - -* Apache Hive 2.3.9 - -## Connection to ELS for Apache Hive Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Apache Hive repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Apache Hive repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Apache Hive repository and plugins to your build configuration: - - - -* To fully switch from the official Apache Hive repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Apache Hive dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Apache Hive repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Hive repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Apache Hive repository into your project. You can now benefit from the secure and vetted Apache Hive libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Apache Hive ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.hive/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.hive/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - diff --git a/docs/els-for-runtimes-and-libraries/apache-santuario-xml-security-for-java/README.md b/docs/els-for-runtimes-and-libraries/apache-santuario-xml-security-for-java/README.md deleted file mode 100644 index d9f2655e..00000000 --- a/docs/els-for-runtimes-and-libraries/apache-santuario-xml-security-for-java/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# Apache Santuario XML Security for Java - -TuxCare's Endless Lifecycle Support (ELS) for Apache Santuario XML Security for Java provides security patches, and selected bug fixes, that are integral to the stable operation of applications using XML Security for Java. - -## Supported Versions - -* Apache Santuario XML Security for Java 2.0.10, 2.3.1 - -## Connection to ELS for Apache Santuario XML Security for Java Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Apache Santuario XML Security for Java repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Apache Santuario XML Security for Java repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Apache Santuario XML Security for Java repository and plugins to your build configuration: - - - -* To fully switch from the official Apache Santuario XML Security for Java repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Apache Santuario XML Security for Java dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Apache Santuario XML Security for Java repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Santuario XML Security for Java repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Apache Santuario XML Security for Java repository into your project. You can now benefit from the secure and vetted Apache Santuario XML Security for Java libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Apache Santuario XML Security for Java ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.santuario/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.santuario/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/apache-thrift/README.md b/docs/els-for-runtimes-and-libraries/apache-thrift/README.md deleted file mode 100644 index fbe8aa60..00000000 --- a/docs/els-for-runtimes-and-libraries/apache-thrift/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# Apache Thrift - -TuxCare's Endless Lifecycle Support (ELS) for Apache Thrift provides security patches, and selected bug fixes, that are integral to the stable operation of applications using Apache Thrift. - -## Supported Versions - -* Apache Thrift 0.9.3 - -### Connection to ELS for Thrift Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Thrift repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Thrift repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Thrift repository and plugins to your build configuration: - - - -* To fully switch from the official Thrift repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Thrift dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Thrift repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Thrift repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Thrift repository into your project. You can now benefit from the secure and vetted Thrift libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Thrift ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.thrift/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.thrift/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/apache-velocity-engine/README.md b/docs/els-for-runtimes-and-libraries/apache-velocity-engine/README.md deleted file mode 100644 index a8681787..00000000 --- a/docs/els-for-runtimes-and-libraries/apache-velocity-engine/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# Apache Velocity Engine - -TuxCare's Endless Lifecycle Support (ELS) for Apache Velocity Engine provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Velocity. - -## Supported Versions - -* Apache Velocity Engine 1.7 - -## Connection to ELS for Apache Velocity Engine Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Apache Velocity Engine repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Apache Velocity Engine repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Apache Velocity Engine repository and plugins to your build configuration: - - - -* To fully switch from the official Apache Velocity Engine repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Apache Velocity Engine dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Apache Velocity Engine repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Apache Velocity Engine repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Apache Velocity Engine repository into your project. You can now benefit from the secure and vetted Apache Velocity Engine libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Apache Velocity Engine ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.velocity/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.apache.velocity/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/dnsjava/README.md b/docs/els-for-runtimes-and-libraries/dnsjava/README.md deleted file mode 100644 index 56793417..00000000 --- a/docs/els-for-runtimes-and-libraries/dnsjava/README.md +++ /dev/null @@ -1,154 +0,0 @@ -# DNSJava - -TuxCare's Endless Lifecycle Support (ELS) for DNSJava provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on DNSJava. - -## Supported Versions - -* DNSJava 2.1.7 - -## Connection to ELS for DNSJava Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for DNSJava repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS DNSJava repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare DNSJava repository and plugins to your build configuration: - - - -* To fully switch from the official DNSJava repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the DNSJava dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare DNSJava repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for DNSJava repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for DNSJava repository into your project. You can now benefit from the secure and vetted DNSJava libraries it provides. - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - diff --git a/docs/els-for-runtimes-and-libraries/el-spec/README.md b/docs/els-for-runtimes-and-libraries/el-spec/README.md deleted file mode 100644 index 82394cef..00000000 --- a/docs/els-for-runtimes-and-libraries/el-spec/README.md +++ /dev/null @@ -1,154 +0,0 @@ -# el-spec - -TuxCare's Endless Lifecycle Support (ELS) for el-spec provides security patches, and selected bug fixes, that are integral to the stable operation of applications depending on the Expression Language specification. - -## Supported Versions - -* el-spec 3.0.0 - -## Connection to ELS for el-spec Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for el-spec repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS el-spec repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare el-spec repository and plugins to your build configuration: - - - -* To fully switch from the official el-spec repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the el-spec dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare el-spec repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for el-spec repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for el-spec repository into your project. You can now benefit from the secure and vetted el-spec libraries it provides. - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - diff --git a/docs/els-for-runtimes-and-libraries/google-guava/README.md b/docs/els-for-runtimes-and-libraries/google-guava/README.md deleted file mode 100644 index 3f8365b0..00000000 --- a/docs/els-for-runtimes-and-libraries/google-guava/README.md +++ /dev/null @@ -1,167 +0,0 @@ -# Google Guava - -TuxCare's Endless Lifecycle Support (ELS) for Google Guava provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on these versions of Google Guava core components. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). -Our ELS for Google Guava service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy Google Guava applications. - -## Supported Versions - -* Google Guava 20.0, 30.1-jre, 31.1-jre - -## Connection to ELS for Google Guava Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Google Guava repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Google Guava repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Google Guava repository and plugins to your build configuration: - - - -* To fully switch from the official Google Guava repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Google Guava dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Google Guava repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Google Guava repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Google Guava repository into your project. You can now benefit from the secure and vetted Google Guava libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Google Guava ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/com.google.guava/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/com.google.guava/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - - - diff --git a/docs/els-for-runtimes-and-libraries/dom4j/README.md b/docs/els-for-runtimes-and-libraries/java-libraries/README.md similarity index 54% rename from docs/els-for-runtimes-and-libraries/dom4j/README.md rename to docs/els-for-runtimes-and-libraries/java-libraries/README.md index 1c31a462..ff64c055 100644 --- a/docs/els-for-runtimes-and-libraries/dom4j/README.md +++ b/docs/els-for-runtimes-and-libraries/java-libraries/README.md @@ -1,19 +1,47 @@ -# Dom4j - -TuxCare's Endless Lifecycle Support (ELS) for Dom4j provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on these versions of Dom4j core components. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). -Our ELS for Dom4j service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy Dom4j applications. - -## Supported Versions - -* Dom4j 1.6.1 - -## Connection to ELS for Dom4j Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Dom4j repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. +# Java Libraries + +Endless Lifecycle Support (ELS) for Runtimes & Libraries from TuxCare provides security fixes for a variety of Java Libraries. This allows you to continue running your Java applications without vulnerability concerns, even after official support has ended. + +## Supported Java Libraries + +* **Apache Commons BeanUtils** 1.9.4 +* **Apache Commons HttpClient** 3.1 +* **Apache Commons IO** 2.7 +* **Apache Commons Lang** 2.4, 2.6, 3.4, 3.10, 3.12.0 +* **Apache CXF** 3.5.9 +* **Apache Hive** 2.3.9 +* **Apache Santuario XML Security For Java** 2.0.10, 2.3.1 +* **Apache Thrift** 0.9.3 +* **Apache Tomcat** 8.5.100, 9.0.75 +* **Apache Velocity Engine** 1.7 +* **DNSJava** 2.1.7 +* **Dom4j** 1.6.1 +* **el-spec** 3.0.0 +* **Google Guava** 20.0, 30.1-jre, 31.1-jre +* **Logback** 1.2.13 +* **Netty** 4.1.115.Final, 4.1.63.Final +* **Nimbus JOSE + JWT** 9.22, 9.24.4 +* **Okio** 2.8.0 +* **Plexus Utils** 1.5.8 +* **Querydsl** 5.1.0 +* **Reload4j** 1.2.17 +* **SnakeYAML** 1.23, 1.26, 1.29, 1.30, 1.33 +* **Snappy Java** 1.1.8.4 +* **Thymeleaf** 3.0.15.RELEASE +* **Woodstox** 5.0.3 +* **XMLUnit** 2.9.1, 2.9.0 + +**Supported architecture:** x86_64. + +Other libraries and architectures upon request. + +## Connection to ELS for Java Libraries Repository + +This guide outlines the steps needed to integrate the TuxCare ELS for Java Libraries repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. ### Step 1: Get user credentials -You need username and password in order to use TuxCare ELS Dom4j repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). +You need username and password in order to use TuxCare ELS Java Libraries repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). ### Step 2: Configure Registry @@ -40,23 +68,23 @@ You need username and password in order to use TuxCare ELS Dom4j repository. Ano For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. ::: - + Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). ### Step 3: Update Build Configuration -Add the TuxCare Dom4j repository and plugins to your build configuration: +Add the TuxCare Java Libraries repository and plugins to your build configuration: -* To fully switch from the official Dom4j repository, replace it with the TuxCare repository. +* To fully switch from the official Java Libraries repository, replace it with the TuxCare repository. * To keep both, add TuxCare after the official one. Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. @@ -65,9 +93,8 @@ Example Maven and Gradle projects are available on GitHub. Remember to set the r ### Step 4: Update Dependencies -Replace the Dom4j dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). +Replace the Java Libraries dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. +Replace the version with the specific ELS artifact you need; available versions are listed in your TuxCare Nexus at `https://nexus.repo.tuxcare.com/repository/els_spring/` (anonymous access is restricted). -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Dom4j repository. +The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Java Libraries repository. ### Conclusion -You've successfully integrated the TuxCare ELS for Dom4j repository into your project. You can now benefit from the secure and vetted Dom4j libraries it provides. +You've successfully integrated the TuxCare ELS for Java Libraries repository into your project. You can now benefit from the secure and vetted Java libraries it provides. ## Vulnerability Exploitability eXchange (VEX) VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. -TuxCare provides VEX for Dom4j ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/dom4j/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/dom4j/). +TuxCare provides VEX for Java Libraries ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/). ## How to Upgrade to a Newer Version of TuxCare Packages If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - + - - diff --git a/docs/els-for-runtimes-and-libraries/logback/README.md b/docs/els-for-runtimes-and-libraries/logback/README.md deleted file mode 100644 index 832772ad..00000000 --- a/docs/els-for-runtimes-and-libraries/logback/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# Logback - -TuxCare's Endless Lifecycle Support (ELS) for Logback provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Logback. - -## Supported Versions - -* Logback 1.2.13 - -## Connection to ELS for Logback Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Logback repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Logback repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Logback repository and plugins to your build configuration: - - - -* To fully switch from the official Logback repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Logback dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Logback repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Logback repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Logback repository into your project. You can now benefit from the secure and vetted Logback libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Logback ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/ch.qos.logback/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/ch.qos.logback/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/netty/README.md b/docs/els-for-runtimes-and-libraries/netty/README.md deleted file mode 100644 index 13a925ac..00000000 --- a/docs/els-for-runtimes-and-libraries/netty/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# Netty - -TuxCare's Endless Lifecycle Support (ELS) for Netty provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Netty. - -## Supported Versions - -* Netty 4.1.115.Final, 4.1.63.Final - -## Connection to ELS for Netty Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Netty repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Netty repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Netty repository and plugins to your build configuration: - - - -* To fully switch from the official Netty repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Netty dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Netty repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Netty repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Netty repository into your project. You can now benefit from the secure and vetted Netty libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Netty ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/io.netty/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/io.netty/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/nimbus-jose-jwt/README.md b/docs/els-for-runtimes-and-libraries/nimbus-jose-jwt/README.md deleted file mode 100644 index 5ee82928..00000000 --- a/docs/els-for-runtimes-and-libraries/nimbus-jose-jwt/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# Nimbus JOSE + JWT - -TuxCare's Endless Lifecycle Support (ELS) for Nimbus JOSE + JWT provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Nimbus JOSE + JWT. - -## Supported Versions - -* Nimbus JOSE + JWT 9.22, 9.24.4 - -## Connection to ELS for Nimbus JOSE + JWT Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Nimbus JOSE + JWT repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Nimbus JOSE + JWT repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Nimbus JOSE + JWT repository and plugins to your build configuration: - - - -* To fully switch from the official Nimbus JOSE + JWT repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Nimbus JOSE + JWT dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Nimbus JOSE + JWT repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Nimbus JOSE + JWT repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Nimbus JOSE + JWT repository into your project. You can now benefit from the secure and vetted Nimbus JOSE + JWT libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Nimbus JOSE + JWT ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/com.nimbusds/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/com.nimbusds/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/okio/README.md b/docs/els-for-runtimes-and-libraries/okio/README.md deleted file mode 100644 index 95df3b8f..00000000 --- a/docs/els-for-runtimes-and-libraries/okio/README.md +++ /dev/null @@ -1,161 +0,0 @@ -# Okio - -TuxCare's Endless Lifecycle Support (ELS) for Okio provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Okio. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). -Our ELS for Okio service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy Okio applications. - -## Supported Versions - -* Okio 2.8.0 - -## Connection to ELS for Okio Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Okio repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Okio repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Okio repository and plugins to your build configuration: - - - -* To fully switch from the official Okio repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Okio dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Okio repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Okio repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Okio repository into your project. You can now benefit from the secure and vetted Okio libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Okio ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/com.squareup.okio/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/com.squareup.okio/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - diff --git a/docs/els-for-runtimes-and-libraries/plexus-utils/README.md b/docs/els-for-runtimes-and-libraries/plexus-utils/README.md deleted file mode 100644 index 296e7d54..00000000 --- a/docs/els-for-runtimes-and-libraries/plexus-utils/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# Plexus Utils - -TuxCare's Endless Lifecycle Support (ELS) for Plexus Utils provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Plexus Utils. - -## Supported Versions - -* Plexus Utils 1.5.8 - -## Connection to ELS for Plexus Utils Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Plexus Utils repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Plexus Utils repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Plexus Utils repository and plugins to your build configuration: - - - -* To fully switch from the official Plexus Utils repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Plexus Utils dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Plexus Utils repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Plexus Utils repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Plexus Utils repository into your project. You can now benefit from the secure and vetted Plexus Utils libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Plexus Utils ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.codehaus.plexus/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.codehaus.plexus/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/querydsl/README.md b/docs/els-for-runtimes-and-libraries/querydsl/README.md deleted file mode 100644 index d54dba70..00000000 --- a/docs/els-for-runtimes-and-libraries/querydsl/README.md +++ /dev/null @@ -1,156 +0,0 @@ -# Querydsl - -TuxCare's Endless Lifecycle Support (ELS) for Querydsl provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Querydsl. - -## Supported Versions - -* Querydsl 5.1.0 - -## Connection to ELS for Querydsl Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Querydsl repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Querydsl repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Querydsl repository and plugins to your build configuration: - - - -* To fully switch from the official Querydsl repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Querydsl dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Querydsl repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Querydsl repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Querydsl repository into your project. You can now benefit from the secure and vetted Querydsl libraries it provides. - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/reload4j/README.md b/docs/els-for-runtimes-and-libraries/reload4j/README.md deleted file mode 100644 index 377f0f65..00000000 --- a/docs/els-for-runtimes-and-libraries/reload4j/README.md +++ /dev/null @@ -1,156 +0,0 @@ -# Reload4j - -TuxCare's Endless Lifecycle Support (ELS) for Reload4j provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Reload4j. - -## Supported Versions - -* Reload4j 1.2.17 - -## Connection to ELS for Reload4j Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Reload4j repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Reload4j repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Reload4j repository and plugins to your build configuration: - - - -* To fully switch from the official Reload4j repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Reload4j dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Reload4j repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Reload4j repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Reload4j repository into your project. You can now benefit from the secure and vetted Reload4j libraries it provides. - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/snakeyaml/README.md b/docs/els-for-runtimes-and-libraries/snakeyaml/README.md deleted file mode 100644 index d8adaa43..00000000 --- a/docs/els-for-runtimes-and-libraries/snakeyaml/README.md +++ /dev/null @@ -1,161 +0,0 @@ -# SnakeYAML - -TuxCare's Endless Lifecycle Support (ELS) for SnakeYAML provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on these versions of SnakeYAML core components. These components have either reached their end of standard support from vendors or have reached End of Life (EOL). -Our ELS for SnakeYAML service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their legacy SnakeYAML applications. - -## Supported Versions - -* SnakeYAML 1.23, 1.26, 1.29, 1.30, 1.33 - -## Connection to ELS for SnakeYAML Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for SnakeYAML repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS SnakeYAML repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - -Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare SnakeYAML repository and plugins to your build configuration: - - - -* To fully switch from the official SnakeYAML repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the SnakeYAML dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare SnakeYAML repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for SnakeYAML repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for SnakeYAML repository into your project. You can now benefit from the secure and vetted SnakeYAML libraries it provides. - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - - - diff --git a/docs/els-for-runtimes-and-libraries/snappy-java/README.md b/docs/els-for-runtimes-and-libraries/snappy-java/README.md deleted file mode 100644 index 31ca8445..00000000 --- a/docs/els-for-runtimes-and-libraries/snappy-java/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# Snappy Java - -TuxCare's Endless Lifecycle Support (ELS) for Snappy Java provides security patches, and selected bug fixes, that are integral to the stable operation of applications using Snappy Java. - -## Supported Versions - -* Snappy Java 1.1.8.4 - -## Connection to ELS for Snappy Java Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Snappy Java repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Snappy Java repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Snappy Java repository and plugins to your build configuration: - - - -* To fully switch from the official Snappy Java repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Snappy Java dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Snappy Java repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Snappy Java repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Snappy Java repository into your project. You can now benefit from the secure and vetted Snappy Java libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Snappy Java ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.xerial.snappy/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.xerial.snappy/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/thymeleaf/README.md b/docs/els-for-runtimes-and-libraries/thymeleaf/README.md deleted file mode 100644 index 63810e33..00000000 --- a/docs/els-for-runtimes-and-libraries/thymeleaf/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# Thymeleaf - -TuxCare's Endless Lifecycle Support (ELS) for Thymeleaf provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Thymeleaf. - -## Supported Versions - -* Thymeleaf 3.0.15.RELEASE - -## Connection to ELS for Thymeleaf Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Thymeleaf repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Thymeleaf repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Thymeleaf repository and plugins to your build configuration: - - - -* To fully switch from the official Thymeleaf repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Thymeleaf dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Thymeleaf repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Thymeleaf repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Thymeleaf repository into your project. You can now benefit from the secure and vetted Thymeleaf libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Thymeleaf ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.thymeleaf/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.thymeleaf/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/woodstox/README.md b/docs/els-for-runtimes-and-libraries/woodstox/README.md deleted file mode 100644 index 0e89bdfc..00000000 --- a/docs/els-for-runtimes-and-libraries/woodstox/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# Woodstox - -TuxCare's Endless Lifecycle Support (ELS) for Woodstox provides security patches, and selected bug fixes, that are integral to the stable operation of applications running on Woodstox. - -## Supported Versions - -* Woodstox 5.0.3 - -## Connection to ELS for Woodstox Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for Woodstox repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS Woodstox repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare Woodstox repository and plugins to your build configuration: - - - -* To fully switch from the official Woodstox repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the Woodstox dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare Woodstox repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for Woodstox repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for Woodstox repository into your project. You can now benefit from the secure and vetted Woodstox libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for Woodstox ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/com.fasterxml.woodstox/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/com.fasterxml.woodstox/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - diff --git a/docs/els-for-runtimes-and-libraries/xmlunit/README.md b/docs/els-for-runtimes-and-libraries/xmlunit/README.md deleted file mode 100644 index 2e6b7aea..00000000 --- a/docs/els-for-runtimes-and-libraries/xmlunit/README.md +++ /dev/null @@ -1,162 +0,0 @@ -# XMLUnit - -TuxCare's Endless Lifecycle Support (ELS) for XMLUnit provides security patches, and selected bug fixes, that are integral to the stable operation of applications using XMLUnit. - -## Supported Versions - -* XMLUnit 2.9.1, 2.9.0 - -## Connection to ELS for XMLUnit Repository - -This guide outlines the steps needed to integrate the TuxCare ELS for XMLUnit repository into your Java application. The repository provides trusted Java libraries that can be easily integrated into your **Maven** and **Gradle** projects. - -### Step 1: Get user credentials - -You need username and password in order to use TuxCare ELS XMLUnit repository. Anonymous access is disabled. To receive username and password please contact [sales@tuxcare.com](mailto:sales@tuxcare.com). - -### Step 2: Configure Registry - -1. Navigate to the directory depending on your operating system. - * Windows - ```text - Maven: C:\Users\{username}\.m2 - Gradle: C:\Users\{username}\.gradle - ``` - * macOS - ```text - Maven: /Users/{username}/.m2 - Gradle: /Users/{username}/.gradle - ``` - * Linux - ```text - Maven: /home/{username}/.m2 - Gradle: /home/{username}/.gradle - ``` - -2. Add the TuxCare repository and plugin repository to your build configuration. - - :::tip - For Maven, you may choose any valid `` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`. - ::: - - - - Here `USERNAME` and `PASSWORD` are your credentials mentioned in the [Step 1](#step-1-get-user-credentials). - -### Step 3: Update Build Configuration - -Add the TuxCare XMLUnit repository and plugins to your build configuration: - - - -* To fully switch from the official XMLUnit repository, replace it with the TuxCare repository. -* To keep both, add TuxCare after the official one. - -Example Maven and Gradle projects are available on GitHub. Remember to set the required environment variables. -* [Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven) -* [Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle) - -### Step 4: Update Dependencies - -Replace the XMLUnit dependencies in your build file with the TuxCare-maintained versions to cover both direct and transitive dependencies. - -You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - - - -### Step 5: Verify and Build - -1. To confirm the TuxCare XMLUnit repository is set up correctly, use your build tool to list the project's dependencies. It shows both direct and transitive dependencies in the classpath. - - - -2. After reviewing the dependencies, include any library from the repository into your project and then run a build: - - - -The build tool you're using should be able to identify and resolve dependencies from the TuxCare ELS for XMLUnit repository. - -### Conclusion - -You've successfully integrated the TuxCare ELS for XMLUnit repository into your project. You can now benefit from the secure and vetted XMLUnit libraries it provides. - -## Vulnerability Exploitability eXchange (VEX) - -VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives, helps prioritize real risks. - -TuxCare provides VEX for XMLUnit ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_java/org.xmlunit/](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.xmlunit/). - -## How to Upgrade to a Newer Version of TuxCare Packages - -If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), you need to update version strings in your Maven or Gradle build file. - - - - From ef260ee0480cc096b10b172e70f270486be664bb Mon Sep 17 00:00:00 2001 From: Sofia Boldyreva Date: Tue, 14 Oct 2025 23:14:46 +0200 Subject: [PATCH 4/7] Update Java libraries, add logos --- docs/.vuepress/config-client/sidebar.ts | 18 ++--- .../public/images/apache-hadoop.webp | Bin 0 -> 2692 bytes .../.vuepress/public/images/apache-kafka.webp | Bin 0 -> 3282 bytes .../.vuepress/public/images/apache-spark.webp | Bin 0 -> 23728 bytes .../public/images/apache-struts.webp | Bin 0 -> 7416 bytes docs/.vuepress/public/images/apache.webp | Bin 0 -> 1542 bytes docs/.vuepress/public/images/jackson.webp | Bin 0 -> 1828 bytes docs/.vuepress/public/images/postgresql.webp | Bin 0 -> 24780 bytes .../java-libraries/README.md | 63 +++++++++++++++--- 9 files changed, 61 insertions(+), 20 deletions(-) create mode 100644 docs/.vuepress/public/images/apache-hadoop.webp create mode 100644 docs/.vuepress/public/images/apache-kafka.webp create mode 100644 docs/.vuepress/public/images/apache-spark.webp create mode 100644 docs/.vuepress/public/images/apache-struts.webp create mode 100644 docs/.vuepress/public/images/apache.webp create mode 100644 docs/.vuepress/public/images/jackson.webp create mode 100644 docs/.vuepress/public/images/postgresql.webp diff --git a/docs/.vuepress/config-client/sidebar.ts b/docs/.vuepress/config-client/sidebar.ts index 87bd45db..7a52569b 100644 --- a/docs/.vuepress/config-client/sidebar.ts +++ b/docs/.vuepress/config-client/sidebar.ts @@ -65,27 +65,23 @@ export default { }, { path: '/els-for-runtimes-and-libraries/apache-hadoop/', - icon: '/images/java.png', + icon: '/images/apache.webp', }, { path: '/els-for-runtimes-and-libraries/apache-struts/', - icon: '/images/java.png', + icon: '/images/apache.webp', }, { path: '/els-for-runtimes-and-libraries/apache-spark/', - icon: '/images/java.png', + icon: '/images/apache-spark.webp', }, { path: '/els-for-runtimes-and-libraries/apache-kafka/', - icon: '/images/java.png', - }, - { - path: '/els-for-runtimes-and-libraries/apache-velocity-engine/', - icon: '/images/java.png', + icon: '/images/apache-kafka.webp', }, { path: '/els-for-runtimes-and-libraries/postgresql/', - icon: '/images/java.png', + icon: '/images/postgresql.webp', }, { path: '/els-for-runtimes-and-libraries/protobuf/', @@ -93,11 +89,11 @@ export default { }, { path: '/els-for-runtimes-and-libraries/jackson/', - icon: '/images/java.png', + icon: '/images/jackson.webp', }, { path: '/els-for-runtimes-and-libraries/apache-commons-lang/', - icon: '/images/java.png', + icon: '/images/apache.webp', }, { path: '/els-for-runtimes-and-libraries/java-libraries/', diff --git a/docs/.vuepress/public/images/apache-hadoop.webp b/docs/.vuepress/public/images/apache-hadoop.webp new file mode 100644 index 0000000000000000000000000000000000000000..b6c3ca3882d528725f63c60ae0761e301039c0b1 GIT binary patch literal 2692 zcmV-~3VZcZNk&F|3IG6CMM6+kP&il$0000G0000+002e+06|PpNX7sF00Cd1v~46d z_o$;s9bH5O0ne)yKmu|kNs^S<3&%RevUi9ZC3#9y7)F&K}%dLaa=%bH!!<|)Dgd1UDn|fE z06r-WhC(5Q>s3w$0HG}a8Ug}hHP6qiecb)X=shYOYJP|9o8aH6uP_hOj+6dme`>vB zy&3+pdjNjAb)}c)`%-`O&K>?i_yOP-^Y6vq*)LlA{r20|zufHt zKU03e`4{n!H>Oe0;$z)mo8AWI?O?{zOup0AlXXO@KJ z5v8at3sf!EKpMZPQk^5}sl`?mhV-MFITZGg0RI1@-dca1-afpO&gnH1v!8`I(?^ND z06)-2Y?cEY(Fz&o8Wg}RN-C>Q27@kd5L{9(ohA!*npQM998`-X|_U$#j|{s?4rqkXq*N=4a9My~?$8 zrp?Kaw7B^5>OaG#9m+#)&fdLcxA7tX?Zf(;+d(o^&9R2`23Pl6_#<=n@o10vFD)z<(+y=k-~YmL z9C8!!y;(fVVk%5~*ZSBx#=k%Uzd(ED4TA{pwKr1epD=s*6a^%Iyw?1e6YTwZ|KskE z$de*-(6$Ne5PnV?7vanQ$gWzQfr zxx;Dk8hT3X6k#vHc5OWE%hGdvfJ83#JL7^AEAMgtiL-sMd+;vYfc(~XB$YmH=08F- ztagBY&q(F*(wV!}9m+c(;oWz6=a4Dj8G}SfOnysad^T?ACb-T*S!-pck0-JNj;c18 zj`P}r;xA}H?c00BPKIxqv3Na-@ItrT>~>MmFKZS5I(7kc7h4@qg_C2-SAcNt0@uW~ zsOe8Z!`s8%*Ke!6m}~UboEy5ebp+T*fQ+Pu$1vFHY>k3~R*O-HsCOoao*|`#%Qb1s z9x62rO2ZA3iDjyS-=7fQKjw9+Y6${|_r@Gx`J5TJAXMEY8bNG_qzjGK5el)c)>=;) zYBTJ2qOScNgP1e(P1OaXTEL+Cuss>Jqxe9>0iTQc!^o^_kIs9s2&#WFK2o7228tT7 z>=Lr!wS?>&NEV{-XrCje%;ocnpbk$#YqE|idI6y5J~2NF%q1F;`!+AuJvC(lWbroy zKivhN`w|ycXBx*LSUoL)Mwtx?P?((nICY;o-*ww&6uV1oTHo0Qill2ICc<5vXa>-Z zELIk{D~2=?G-u#|Hkizx`E)tdyc6t~+P|q_xMgf+OTnHb?1{?tqB$3WZXMXckh#SV zlvaN9jNwOZypmOdIDFDnCxAt+`#YMH1|xzFyRDQ~H2=-7_`rT{1$s>0rGx+f=R_(- z^qa>8gs6zRLB{X)wa-}S*4$Kc^zd{`a$f-12v}^I#J^*J^_%~pK|&dx@iP9=b@B%G zk#I~&Qx#1Vg3upRJ|E*RU4-S`j*r{{X!b!yn}k~UBd``?5k)UNsMjg-hZ!T*czAI( zv?vxn#AMe;7m77#Mt}(PJ$6DEf8_f@GvyBvOB#wTKX8#1#Sg%#=9xa()?#g~2Wrc@ zF#}LGILpT}JpJ3|%e8q}d8RZ+2MuVj{ekti3IE`-y-4u0Vcfk00>61@xE>l}Xeyus zvlQMcsmrnqb13KmLa}OX{F83hr$b%+YqpymGcj2e@)fghe@Z0mp9hC#Q4BgAv#X0Z z06ISs(5w+`kNi^)?-&1I07ZrDe~R)ewNmgoH#$LGG6ACi@Ynq0Of*Dila=`Agw*X` zb9Rqtx`lX#HVaBH2J zrd8?OV0GnsWpfZy=Kpj8?Jf-4`z#~OeyXN14D+M?H4ZK_Q+Y@IK*E?BkRX3V0&S)< zM{aG^RwK*_R4pWz-!TTiC4=N}u>>U`S^l5rSj)tCl_IS-TE~`A5mBY6%!sT4b@ATN zgLi7PdjeLWD`$;|dsu39PV@u!ep?u2II__OKloz(d+vA{wG_KdVehW-O;FpmMnm)e z)Q?6PxsP3fkD2aND=U|86j+*P`HO#c8G^(huSSN0Jq_Kxoboe^KSj`L?!kZ0Xr8wx zthj^NqCzouYOMfe3^Blqe|-X&o?hJ3Mq}+_{xDUfztAmUV1+>gzZJZB{284&A5@7? zWkrgB*8X8UbrDV9@CFMUqT2BU!Qhm_$;Z(m2T{%t+`33cVbL8rVV`MB z7lYl>+95RU{W>P9ep>56djRzDY#xdX$mqc!KO5T+xK%0m5XX~;L3#Eh4Q(~?(rkaf zV1I=9m{(8GjD!v{88=SH^>}PR!JYfUg@o!1*?l(zl0=pW`c!s1`;8lAbeBZ yxBt(HGz0_c6C}F>kaj%Oqr_uR7L}r7|MHl2FPlcilfV0yo~g4`000000000q!aoN9 literal 0 HcmV?d00001 diff --git a/docs/.vuepress/public/images/apache-kafka.webp b/docs/.vuepress/public/images/apache-kafka.webp new file mode 100644 index 0000000000000000000000000000000000000000..9820100f410a973ff47a85533212efc0fccd7971 GIT binary patch literal 3282 zcmV;@3@!6gNk&G>3;+OEMM6+kP&il$0000G0001V002M$06|PpNSFoy00E$eZQI#s zy5Bc%+QHhkZR4|Tu5H`4ZQHi-X>HryooSmQ*KuT$w4I|}{fY<%ZW}4e9^)K!;C`V0 zyv;Nrp0o0N+hp6jgaNL}jlT^jV3UZ6 z%9z>|^H#IFIkrmcZHryU?4QVRHMWqI;+1muh5e3^IWkZs_}A)iAT zo?1#yPJ<~IA%IREXk?9YGE?%rvu?}+qt^+zX641V`GbI7DT}Ogbw6X{oHMcgx~cP( z`H6evTglVf6uCu`dPZELgyp7N9+V{6ZXGS~3lFKqNKTUo*jO3sYZ^Q!o9Ne`Ft&HS zeRk@(5BAU!6Go40lj)XT^Z&+UQf$qR6j@!Kd_4x!5@!3l8s3+wt6%X8U>8jVmXfU- zW3=iepN0gl95$z1R_hROfc%W+`7`8>#EjGVFug8}UL_A>HI5*+MEw})cp$6*zYLRf z0woHAq&XfV$4)6+1hcxZ&Wj7PaghbibQ$8w)4CM6dY*QTrV=a}VZ5j%?dvktME0d| zBViCgSO{Rdo}U5%Oncxr3VhQdQw=Y9hg{0bFUeT-ro;j=Nm8Cg@&a9zJ&vJJhQdz} zmH_Ddgkk{XptqdTk<&s$dktS-)@r_8uY2gW{pQzdg9mJ)_Dzl@ENwktNsWo&j=A`Odrn$i3l8qruT@5p)e3|q{@7*FIafLtDq)!?R>$F^XZKGtVSj61*q`+tAA9MYm5K@X^wNMBAwLs$1MpNKvS;;xc`bO1wMORW_tg`aIpv(@Ew8_sA zugOzyDy4a(u1zX!?GgQ zVDcO#=ldD;q8Q<8bj0$?M)2!SgxnzOX}&*0o|1f*(d<7GrVl!jgE4gu%6Tg6CnsMg zQ2AqSSxLU0Bf@ET#L~({l#3O(OdWwHN`zMnQI{XT0A?top>%SZGCDsgtDQ68mDp~@VCjfa6!S|+3;qSuWHl~DeqSht zK?;(S=KGCD>y22hfOlkK9|;rWw0{nO!j`AO`!P|1Wh2G|OU1>BOO#RH&xvth($S=K z3wA?nwqn2D>q|zNK0W$vAZxYYu2Wd+Un&dA8G|%lj(TFax9T z!AK-)lXrFO0092~&~p6NG1xY$O7I+6=b3F3Zs!x)g_wT|EzNBIzgSierqFTGI@4tr z!MZ%UgyBq%TOO0bOhGm{Xtuz4f((Y_`aMUXhpz>Cnt1K>ehJ+v90@0ZDVQ2YGs}t-?fHPed^$U)cc9a32mUJXE58%c#)yh>U=6Y> zyw`GhShnEzQP}JMd3^4aWs;7<)e;$qE%u4;SNKLfQxz{U!{xz9}(l^YGq^RYU z^m7H+KdYc!Jk}rC_x4G~`|RE(4Rca+PDNddURV1&GC%btp$#d*vVH~{vdi%o4QbpB z1h^jVyWpjZbf9`oj+b75B`y4ESGw3eg{Qvb_U9orv zmb9S?J6`*{%Iu&IL7rdNgN^3kCIf+76`qYl_15@ovQ)u^X%S*;wfBUPk-UFe>iNk{ ziIOS3t0*!Em0~Lzs#4dXk6oM?Lui~1qt?dQQ{|sJxdA;irhHhWu?c!vS}IIYy9_VIj(|Gu>Rp`ND8OP;(vD|Ny1RJJ1*5nX&T5l9ryyy5MAq8qmDJ#@9N z?voD9v*gIfqUV!!WbAgB8`@K(8BXWR>T;ywG&Vc;a1d!lk_+-$9ScX8lhEVHU)JE_&v3#!(WUgC=<#4|;2b%|WD$kVsIPxoMPX^os88blL zvpBfLd?*43t~a#z3Brd?{dywo+!4##zhk%Ke8wjd2;v3b;P)e+B}t?v&i5C0A+#Rp z5+kw^jpjn=6^*k7h4l$KFmV*q)!VNX=7c>8(!GBWUN|R)vlx6J_c%~iWV)$l3oA7g zQl1$q$Dt?WK;f^OM)E#K?qYq6aTVSiwluW?4z?iz7!C?9$ez^1OvDYATL}ZS2R(!! zkk$%2-0d!nWqQg+E@dJ!LjsFJ3dCTEct3{X?N9U`jF43ygnw-_Wkrj%cSNkULc&;} zbzJ9MLgxMhB8XYuqB@IMYO;xtUt&C|2mi_k{;TaRF_3*4w*n_6eR}5>|5x3(S6Wn2 zZ6#ho`UjR#Q(C2qneC!+VU|Jn`}R@bKhS zHQzT2;o;#QDml!!$^5P_SC**!{P{Cw&iTC5mzb9i9*{ycC22cml%74=VwPgYf3o$S zr1QZ`wNE2N-{$S&AHNsI^+*ql>?Sn45-D^=&hi!XU=m>O-EjqLCN3tdm*-7(Lb^J@4{{iM|*Q@7{$XLp8fO zAY%Y>;3yw8$pyM6@z5F2HmNWi3e7Yk7Vob+V0BsoI>ew|AGuF z0=6uxx-H9U>IWpHwk;NSApC!70boT^QnOyFF!->h?H*S|XaY4E;;wFoCsL8L$=CEI zJNh`uvEfhC%>GGTxnA0{sys#(&qUkPA&|K97YKjkh=!mwUaz+@CQR)1C{aV50&+Xt z+E+>Jq0=q2g&!6Gl8hl@(KJCB3Y3G!lTPRV$Q*<(v>qNA<~s#Y?QZrmB+y(dZb=>L z0%+HYjyvnj{nj=!f2{A@%wD%~tkG#>=<-=bQa_Q;fQvs|*>sxaYNE1zBCIR^xnt^= zlLLHqjJ9Ki*2?B3JawETQ!SSM10=W9^1`486yu5|@QoH7BCI}bhd|xwl6Xt@J{@G3 z8&ek`m%6lQ-xDCQHGkvV1mgF3EBy>|LA$0I1ip z-7E;rce$nR{~b6LNsS5F1!+0)%J^9DGOFosKhMuVo18&Fu~dKl4)ag`#CiPCc8Vd zAiNOBfo5M>j_QbG9vvmW)^2jbon$>pCegk=*8nII{+?kvTlsa2?V!ICs9!R})T@n_ zCK5$g6AlC|SW%Bw&oV}Czuud`bgh9K?SI+L2|p3HwII(bPXu?>(~S~fB%Qd(L14Zy z9~<^E`nsw^=EQfctxuEYd!3QgB+0NZwnFb09t?c!6-c~VLq)9fbqFmGM0&rF2#X)f zNPD+cxJWltRH5I0n_J<`3G^6@+{@QghHLolmbC*ma*^&^Q0Y8|W0?w68(`~QB(HG+ z(&#suay#>Ap_FRgbr*5YUGj!xt__bS?|ZoDtLLBvu5R?YQREQBf^DeNtYn6 zSBqv|i3x=ZfItvZI0Cg5XXdl`Dq-_1v8PKsKYQc_^MhC|(27h4QBs-kPu~Hp_tU5Y=efV~Qeula$2)d(*)31tw4zxrQ|J)uK(Ehi z2drST{NZaZc=aW`GBL224c*c=oO6OwG8GGbe@SbD1!UiGFvdckM(a?2x8 zoZ8pASr1VBW-}jt82yp~mVpoTu2jhyM(9j{V)E`kLk%bJ|4y1? zf(!4}I*?0^lXAz5pcm+-V>nUku7O%KSShV_f{M_{O=_4B9=tl<;F} z@Z22y22BoBAdy0)w@gwav`~>ZnKYT2zc?kflNyhrA4rl7Huq>8q_Kej1!ZU24-H02 zd6wz0k>2+eDLRHb3j@oSn@-FZaT$l^NTjx^!Cv9xYK~UF6-r_e-pp;wHPncqlOL0f z?3F}OeVb(oidwthR&KnGW35nN%8s)`5XGX7$OYTM+oI8atDaR$tO%rKKh8>15^5N> zv0qIcBuZW!dY~eoFF*a9iS?4%ky2oouXRP_ zCHqgRHY{GByeY#Hugnse6E+es>16i$I zS$?6AV)p^`#6?jw&gbAik_(|ki}kv)+mH~j8y3EDI9NhK(4a=X$3Qmu)lCg=a8Pus zQx7S+#u`z9Z=UhpfY&%TB{DbDkQh@oExhn(Bh%w+T1<>1$`hSbhrjk=s`=@a{J zLS=zx^fno-^aXfH8&xL{(F|( z(gKKOan3=tRt2rt$v4$=Px&;REKby4_b0dAjOzm6WtUBo4j_phuC4N@HlUn2kCZWO zKnYUCb!-S$#Y)-hZKkWcmcdL)Q25?k>6aw4YJ23@2GFQ1WqMATUB{X0;BgQn^@+~G zmz@>plDFFEj_-(DO^=WaFYKO8Z3cm6AOA&1sgD)dw3*T$F*p(9q&-7yV>#BSYf#rz zCNubn;tHQ(jn8RRs8Mr=B3b3!%Ejd^^eM2p-y^Fv^WPkqB6cvCw~+Xl$|LolmR*PKIdeb-Us*!8hzCmFlJccV1fISQxz&Fu* zwjMQfK?H2o2XN53SUteoJh+?kQhI*_@|xl;gcLM#t6V{5{l%I04E6SF?#bTw0bM+@ z0Kaqg;g)}uo^x*J8G%iQpPlRlNi@I9dx`m*jTFFG5w8MUI_S+r~=eo(k8Pun%!qGX!D`^m)`{H}q(=lxgnakPeGJU;{zcrSBBWV6b zX~>@bjG}S~66o#@*3MUF`GQo4e{+dR!yl%M3cE$ReGR#*!wV=tvp^j&Zu@~oYfd+N zf9miTGQ&!#PxNPFAoI)CUmF` zD5}DmxFwg}7f6EUoXTb&Qf0MjLo$e80#pPS`hCt~L8&b7=8mKW*_BnXwoSPf_V02)GU;h_^I^T%4bHrg$AAHpZw7xDp znYTIe=hrEJ*7*kQT$f7<`=fYrybCSW!}#`^r!AV#6R;-h6w0p}`s|U^Xmx%Dk(Y+G zqI7Z%QM?<1D^(dG;m%)E{F{)o4O4*4%k>L{Z-l*IR9g}Q@nGNp8%b8ZO=iUda_2Fj^{ z;e)oB+Z=O8LeAx09s{I}vHe)YmApO%c*kWzp`WP|-h1s*b{l!Jkbf0ZHK;vOLv}9A7ko+#J>L*`4+bQoxMb=|I}O%lmt+)W z+6dVdLSYd_&|E`-N|2~=FM4nRCHbkUQSXj_@)b>#bW!X+a5-f~9k_i_h&&~T-g0%W zMg)90AO6$6d_0=yzO>ZG?0K`ap_*uF#!9tFe{Q3eynlDqwBzXeZ(yP0M9{eab=w&P zOTz)l%3&+Fn76)~GN0Q^)h%q;jJ(k3G~ z{NQ-+vVjYr1OkBLcJWwfCG*+CnBeF>3aU(unl_hKd4qTd)i;;2s}##IL9EY?_CJ$DtY&#Lkp-&8KVH96gUw^zE61ENwSV0HrmQSrGHfh}L&( z$y}RE&fO~p+xTIqoWVL4=;xB3UB40Y3qkz`8&f7DQ7YP}(}F5-e9(1+Lwr!f(D0W! z_DM2M6U!qL=;T)W_U-14Kez1Ex6E`ZlFTVwsvv_san_kAx_2X6AtuDqn|F_zLe5)_ zh}*oTBm#lXpRSlK*tYppOl9}u_*?Z8;!8Lz3zkrnb3J|!}d3SlM17*-bL z^#a@_GvcTJlK9wb`F-6gXcy{5(!o^OM{BaS_#eQ^Yp|O3(L%S;LIs0J$|rOi8L*`R zRQy;w7MBx=)`T;=M+G+yxB4a5y~0Z=sg@~%uF#Atf~F~9;Td_#*>>1InbhAWC(;@)0ID%jB!xnlrbNv{L-nMa==r%l>i_tU<*s zN4)3hZ?zB}T`9rdw6_hmiG?Vy(SWqd`WxG{178JY3EDNoCM#xVKkAboa$HC&W~u^E zk1$nf-XRgwHJ9f$2k78tWz0mMnQT!RXo$<)uKJjM$QuAPC6X1lf(2so&h2OB*?K~B zRN7O>b}rsSh59nKsTH@Hp$vMeO=?2#ueH!tf`|QlE0fY$7N!E;9CX zL65iObT~X3se5sZDoQ_jPI5e3u1*D#z{<}#&BJHgDtQvQK-VGkUqVHw-L(FY@rd+l z0z;(C03ZNY)|)3Q7r#DUrXv}o>zH)EMP#YSL&lyR2e-e=G4m|h;Q(dC_PdS2$jnLJ z9NhkozX%A1FF&EZC=AIx>55(CQ}`IoCoYm9R6pzYk?tZK85OdhN@cdZ)CbXwYru9o z*FyLaNEkE6nlR^<6rIS!f$0MP4N<-T7dH(<`(n=L-2 zV_<=S$Dx?Ef75mXvH^WoulE}F)A5EW(_AP!`2Q8RYP4)tQc0gK4+zLyA1?4q2E@VF z37tKl>3I&AUoj<72zOvXR-OG>z3r*`h?7g%VcE9DUsIq+JUh}&3lR`5q(<)N>TpOt zDPcZnxX`?MbUyCh-`YOus@^e^^N*IUy%S$wR>nlFaQ3{ke1o`!o_GWA6@M$XPkhQU z&7on+I*m{6dTL1Ah>1KCbk0Lfw6z2DVeFH{l?^SnB;nsyQ>|$49K4$TRbbY9eEa zCw>V+Z7gnU780o;{RTsB>TD|acUKR4DMCraTHTwF3Sa}i_4Kz%EHmTFyDy}9k9Ryd zdg!!2m3xZ+v>-Rr3C&i1-gkbe+F}a8Nd+W~LO5|to%wh%*PX*!&@353Kon*oRR24O z2fF<8HzZo3^fX-oaaYBC5ll~2ntmEgZ8>Z!7r~Ly4*YQ@z5CA$5RR;g49zrUi3?+W z-`Kg(x6&ki=Z6!W-nR?tlpUpT^r-&|y=HL4>#g#(EiiO)h!*LFG4EcbP+MYy-1ubf zbq@(#lcoX=L;i1|Md(Mp^s@lYp7`+}*tz3HmqU@B+;n#dXh*j|e$fb5hPDMoS->A% z3wPn(vZX=htrPSGzSqUH8ze(Cy)o}|xWc(*e&2n~^W%=h2 zJJJX{Ecf31CeLQ;CDp$`JTWM=Z@X6HQ5`@|+h-ZaLrb*Ad<5-|9i`DpMce_!GutX$ z@s9nrvv}q% z&C{S4`PAc%2#;<$rqb5YZ0wkZHhtfE0#1ljymfe*X=&sgG=-hq2`S_Ngr&G;rAv-f zb_hc;yMfwsA-Onf!QMB;kaD)l{Ls$2`AnSO%F{C2HSv6YvXWVs2FzT+*{ zYi?}j9N+e1u`@gzbPJ^(bKG|XG0RjFwhf{;S4eH8HtXPrbdw4(EGcn9Wrsy?^(=6D zsIb>4xnP?xUV@n1dcCLa)wx55kTb^byvR{OUXpP3Kc;kUqPi4Fbg@(caz<16-t@u3 zpvaOTpvYSt&@;vi>vvc!S}-#H8vHDO%&@$Vwy>)!r@xUy`F6ak%ai*R&3bm9UN8N$ z*gRv<*B!s>mS)p*$=lG011aB#uZwgoLOA{+Mve0C#KEf;M014+ruQkb7?;R$|9C~| z*+xAM>_O_L!fXq;_9*K+YDQE@ZBwr?f6AW~IXf3v8elI4Cr-hjFp16LI+t*Hh7GD-Uk+Scdju7tFkHqo_NEW_jhAtoP@9-@KPMaI0IVyKrnb>z zkp@5|oMp=-RIz}J`}Klj;AVa?f?At>+{aSLSPmv(97*9CU93?aCBvc&cL?Rk`1y;d zUn{H;OU7uy7b-SvL>ePPUTBkOGyX|Y{&atF+SUF>ZrnBnmUOb}?d$O4&u8@bv7&zG|%H@cp4_9#hgaaH*k{yVE1DqG9U#2cpPT7KS!S5HBjG8o<@UJD-|*lG5_PjgeVc~<3tj@rZC%GnLiosTK?O}+@379l9MQrWUEtv0BZ=_ zbclv8Qhv{gAD}*+j^yk;gaJyV-#6Gl0NTamGzei0F3zq=)pA)*`!>)Bt#S`sintRFZIqbKF2*!Ck@q01IZ=gKF(dQ~uhPNpVv9V=d(hAuu* ztjnZ{Bf^yZh1Pp1=g{<&iFBTeIJY3dt|Q)>LYf3N;9`!~8RG*M{JMjjAW0@B0(jZK zCS2TqHSeU0O@e^1aUHeju9?s;K2};vDY}N;$%TO0Z#1ZbkUeemB>Q$zEw(*5+p;4z zW?tLgc_oE~hSgWQ4jk&pq|sweabqfxxQdGM#i=bq&pAGM+Ka%Z+?yc2AW7QYvIis! z?@9UImzr73_76!XILx0O_@Wy6YEiO3&>Jg~cP7mF( zi`s2OQ7wCBr$PNTS5j-6eX`BKIStshwdEC!!lILAKT)KQ-+sjty#TEYL@bNZ=aNKi zBuNeu{^W-NF-rgd2fHVmAwT&0)FHgZ@V;4{(C+HNQnh(QnyBDBq?>%KB-yN>bBinY zHAdQmCatBk35Df*HshiXSgTGSpw2%qAL1p5lhcTFSS>pUB_fm4?6CY6Z_O;zw+Q)Z+a4Y?HZw^P^&qmzq$^^+p1(o3eh-<4QpxRfh%DLW zk173`b6d`~>@w3Wt-=Z9g_c}{oK|T49x$dv8?rMG(&;vzD$zzJ>}P%Hfl|gpxVw(1a)y5T1scam?@Z)Ufph|uHImb$03eH&7dL=s!> zRo&=2#aX2K@L@3kaZc5!A#sJK?GCAJF9UHq&|EOEDb zHi#1-M7`mlGNIkqYav{FF)%tlp7yy_$+(^+ejObPog41h-rj15xfk18Rv6tu#S&2m zqZ{6zURWO`IGI*MOdrDl3xxa2NEa<)LZ#j2 zb8)VgVq7trGKyglQE4sHEHI4YRTtgq0LqFOz}Y!l>&dZQ-*8U;*z0k@X7JBS@e~8{ zRPFHTH7?HXiZz9P`^IL_#%p!kV)wa+MY|A{x1sj|MFcbib4qM!&|JSS=HIIb&lI#aN!5MH@DqL61C$<5_D( zex|0$**{y{YhMyxGk%FvUukeW`Bb%9Z7%y*qO21gfh2VubLyxU+Q^HvJyc6yYKHJ? zm&>VjVBQu%H$=m%NfdheUhyQgHj1%#qkp6{F!Q{=eUUiq#p0`qgzPgMj%kL@K) zw8H+U#S}qTwcubxt$+t`mlf&ySC>VlNBUk9w!ZmczcKs$_E~< zIBCs&=(pAh70#T?FY01~KQ+mms?asj*_lc#3bza{q#2j9y8SUw^EZu@Q@&v+)X93u zbqG}~N8xdBw*yi5MF(>l8f(ED#R@AyTiGM=tj{>Pn672?YC*4+t zfb-^O9+LrqYC_2zTX@m*@mq##F~Xlb1%dTck(^q|QpSw1eF%2~Jw{5MaWe+W;bE|`JlQ#Wa#v>qkuUK-r z*cDCw6DpWAB=_;p6ge!~f)zlsiqgidsKr3)@kKkjQN^CuuS)r~5tIZ{#|9+!&VR`P zih#|tM;ElxDsqL{Bgj)&(IhXo=r65yBDpW50ep&yN^sdIQM_1;CpAtcApC((7sc3F zoyO2oBTP%C3|I@{xTPBnft61%s9kf^Ckrw0_XsQcS4j*He!voxri&?pg-TV-oVpEh z`GT<8HQ{ho0t0}1FWja4J85h}NTi*~@}avv?>$mdk<`aiq{U%KkM}AxtQh!%cl&pk z3vjS8lAAoTdFkW+lxx%5Q1RsMkr|;Su^!{3P?q%1S&igXW9Uj1fb}W4&qoWT)X7M= zsjlXy*e3r6G&hpju3DtZ`UV-?PQ&f8 zTg{_?nSdL4ckr45$|qIjHOeS-8S6thE0MU=Z3J{8lEjL`IpsMtM}cj(Zq@dJJFR(z z-mqfwAJ|Cf|FWZg+vqnU;R^XsMBbfr#m^2Q2)8!!tRwaN7xaQ36z94(V7c%oGZ@{f z8;5>SkCp&`)M<)bk=`-W>Dc-r_h^T12W6a!)*7=+)x*p-8oM@Bld8m48@%(HxL3bp z7^4zlPUl$(0gYgqrAuWin>aQ*6%YA33?R17ES$jgA1Xr0fX#f}BazV?4es!=aQUs* z|LIC>_^k!)-RGt2q~`^YVukwl%DG5due-mRb33U~t#DJ7{Yyio=$Mw)Fk?^LoP#Y1 z@{9D(7zip{3nI{M)g99tDxigqn$4QX?JU%7$MU3miRF}8?+OmF^C0|SNm_gS*dbX> z`}l-AAhGx}moiJel@}&eq+vVhx;(EENm{FgDf^ykaMiLAZ6yh)6IKoT+H9HbZ9dPJ zER_cLh35S^zT6_EK!&;x+3?`)w0IJm5B3FIHoZ|0skiuix?uZ{Cc3ja?|--)Wd>*j&r}4H{B@{LuSkJRH^#*{Q12U=Jw|&nw6=>SS;D3) z!!1LZ+z&WPzW301ARuJ@aLB^r>Qv%20SgLZ4_#kK**J5dzo5b#df3)@XDG&{AUNze z5yB22gkvtueITC9)lH6B36ZdTos&NyKN>|rcS&H?A#80n6NzhfvZ2ft}zWU&WDyvnz3nM%O*`{cI-MENFY>sRQi zN>|5xsnR(^Pk}EaOz8!{$GBdE$8QI1MJ7_wj8FzfT%z+)0TRphIi>n)9c6}h<^*mu zqr74UN~_3LH0^$0n-O#lK}LpDcnn2b?PO2>SC?rLR+6<9BP0_|PoAmBqE%RzB<17J z&Lp#&NE*uUp<;ZBfQio#s2I8T1~U>2T=&+|A_DcfOJM!Ab2v8lySHk;qRSvlgg3ZI(EIWbTfAQQZ#RB3bKo(Li2PnyW-sWIbZsl z1-tqMl0d$}J!nN-d#ILpkb^aj>XdNp^qDg*8C=MZQ&8uJc6iW7QV@4g5@IgoN?39Y zFK5iR>Q+Z1MO0LMyzQK8cMVP)^MT~@2adf^v5XSUcofDWCRhe#jDS<(79|m@4i|WY z-yGL)d#05WjB~Kia8TG@oZR8HoV25n>~R8IFnY>iK@m;RS<|_*O|DWx(@qkbnN(N6 zO|zB~!AZ0=5AXQf1Z%uTt~_=>S>_(>Rp*ZMaWY||rPSsBI`S=rR=TuplFK2)0iUE0 zutr>R8h3fLxVV^hFxnb8l{Elwjfg=F(bGqVIe|}|Kcmji2$eNp7smVp5LJb53Wxyl zN3c%|z@#=cQtyW>#$SY(IC^pmlX{mHReKOG{K=G$Bh}{hO{hxQnD=kgorz(pwFKe9Y$B`y%A-bTnJg zkyY8Y^dYJ3xc0TIhUg3F8{?AEAXmPv)U^(XE3UBc{tAO1r@}`5DuOF4N}t$dDPEvhHgL39U(VB^dXymXH?gdTu&R zirH&lIPR2aa~Y_w^vnDvzqE9S(%HaANva6kbgb~+GN+e9aR}Olc#efUY^;O61~u&A zVTHY@vf6YZ%&tZf?x=*S=tc!0o^zd8NqVMOt1QQVKM_A@7n32}zw7vO`M8q;j5A(I zY?8*2V8jF*gV*Zi20hR3^qH%AR~;hosH9|gdL-)--tukjiRcqLai#9{<|5&;Rk!5^ z{qSEyu0?sM;d0+-0vkFdl9j;26cjXKmaDKy9btOG%g%dJC5aCFBKep%7JgqSN$cUh z;bqVByo3@hI41eXSfv+T`bH-F@!MTWw$JKg=bauh3-Fy&rpx&RvT_;k9gB|6$oA|1 zASQjrNVg(8kk93AOowD7^Rb-HE9RJpqvqR7e~^Uxc06QQqL5A!{tI!k95xe2U_%dC zvG^9cAA@k+9AjJCr&cJ8Md;k`Opa$;&QXmy+e8Z`F^`>KYM1Cd8yF5q>N%OxOZ6HE zR;Dca#i0A`3FGeUX{&qT59}-kR2C2@YRQbI=Fvx5bJ~t_?i3x2{d@y$xF!OvX_6i3 z!TRxHDh>UE^qMQIhS|}rF8&6crHw^fWybvn&Hs(6`yZAGXgr99^(+{lHIrRs1s+}U zz=RIBc=(%FNA8l1eTEu3-qZ}b?AARuG4%OurSC@$o9?PPtaNNUDv+CVzlG0<&yL;p zNd-t!?m(|=MFp8W1ouVjduRFUgU2C2)M>nNTEoaMt z2klGItd0%Kzz&_H-rhqR(UcZS+74Yj*z+0lYp1>Ygl;OSO(`iS^i>E=P${oS&N<#n z(xmgX(|+Kur3jXjKq-Igwad-3dBL5!TKlF*3WYuHCgpVlzeKn=)af*TgH;35&uCa% z6_~I=yH8aAuXdBCZ_t)U!%bT^sjXLR4`#1mGhIC_CK}q=q(>2iCa$6_>x7ED!}YCm ziMRa=_u#vE3pgJDoe$1a309P(ixNk}+e*?c*2Mx)u2=>^?B%z9dRZSsvlyNE>ynZd z(OM^=WUpq!X9m!= z{wGe^jBk^(tzWulSQW4w2H&XLlry|L`J3ZA&yD**n+r2@s_npanIO4{d+4dzz5Lz4wbMc0AG6)c z8@c25_Q3zldfT(_yKhnVJ9n5(g0YPYlA?%1s>=JjI~%!~_U{2~0d<#v+qCPfU8?;) zr{`Js_P0g1gBRq(W+n^^H--D{hk;GL0e5C?tca|?{*`{80~BwvZu`#KU)~=|eG)x5 zVnxq)vQ*ww-ie=A8nu7F_utf*XupzOWc?MGb>DKjaz}Ml`P`{AF#YVooz$)J?fDt& z(S1!8W7bk&#J$$F|DM7zX8-;)u;)(qHaL*^F7WOe*Z+So!;166-BJ71wdw7*`}Td& ztBkvy;~z_tI%%W{77%*?qz2<;Xiief`{i|v_k&fpJ5W`z7|p9L)TB!7Zv9?mSOadnOTv~pNpRO(qeN<6OWpF!2n?6FGbX4%7OwWNp?ET) z({}%i!hLuE6q=}T4o>|4_R@%`m5=IV_A9~<&b>av>5WVh>os?N2z)dqJzDQ{P&0N3 zvnugJ)`9zFd49zorVaI*XtryD{Yd+MVTK zThUagKE!Y`Cz1Wjlw*M^f6z$uuNA5IK4RHbS9W?g8kV|?j#u5!eG#41gWyd~F#(>@ZTIfFP|zH^*5_>h$( zvz2an)JNMiw5rD6uQ{<3<(pc>4hZ6NyLuiC!ep#SOdJdU2=8)Zqg(Xl-`9!Fd@MsU zZ^4&Gw|FH{n^7!iR_gTmaOt3Mmxw~wpXhPuqu7hIHedU`D6!}fsTYH#; zkH+vFdc135COrU&EHxwhqH(`aR^g!>kGyz?>hTd9ix%!obkltz`dC9(-B|L<%~ZP< zc=&5qR>0&skR^8EHB^OgeD_1L3hPt@({Nx}&Idia@AgX_YCNN*eCq?NZx8*1Zr2{S za|-dBRXsok>mY*2+=c0}HktWmNNEq3oR_1FrMj!u;Wt03M~(dAS&L`EJhXkK8}9?~ z!bf<_BRQzP(2B~yKM_s&J8^wzL8Uc=c}}H!Z`0V`8hv$S?scRpS&%y=w~tm~kzoC@ z%~uCqU34F3DGX?DF`U>iY!jS-xtQ>cUIwpNu>$CAvSg8|eMT&nSRumcsV`Nxae8VN%z;JzItcOZ2siM+c`}lQ0xKWhjn-nLWDM zJ7fR6wvlkZgBbEbZnsPMYSZ$Xlsx$zPMKLtb@NDZ`Zbxu4AU;#%8XU>%`+nMv@wJ! zsf?Ghpsx3H#TefUB7tD9N7)1lnKjM=wV{!4xBjiQ{=v{&qbA22iMV%P1Bl-7f8n;( z=n6>P@XN--;}lxT;kw8F#&fzp?`P;}+A<~SD_v0sIUHdI)BC<(K1*IZ)#YzLyZH8* zh4ag&cUx*tZ^*h~76F$Z0+ROc8O+HBMpy8gs*>Ok?Xu9L)PH~j=O-G1L&7&OeskIh z(+`jq3>(|`YPT1@rfLaU^wL<^huY|1$4;(;hq*$Ywa@0NKacBueudlyws164G(^fU zySgg$?`sQQ=WrbY%I9)g_RFI#*c(of7+Nd}2-ZH=cJ#=Wxf3$<&#se`Bi45*$U2vivI8Ms=ohAktSs;I+JGWACKa;lADDG0l z^IwC*op$(t-L;0o&u9CQAA|pie;QhcUz=*O#(PE#7s!V4N6}_)%xt0arQ}lYzxby< z$-0obQP^VR_nJBTyuo4ou(S45D_ZhS%H0Du25#<;>5E zuUX$RCFOi^V6+fdj$JolqdR;eUn}(AL11Z*-^pZC)?T`d=tel+2k^7Q-b%ojzq5|Q zZxgmzu4<96)8?<;WMC-4)zUI+9B?DBk;TH)G=jmpqWa(}CHIL6-h*cb@AK`gct2kF zQBQoE{^$|Ic*XJ>BEvD`XCA>0)=D7|C{V7#=Ms5BicKi_`Zc}~uh&uLt zHFASKMaw7T!X5V?}ztZaLVd;+aO8 zr_-J(vA^AUy__|t)_V9)>3|<&0+5Z?)v-W{k@B)q;j#l#8xoDawf6xh-?pALNnzi; zt*BDkUbz+Aq<{E4JBW;FX5NQ@;k~3q&4tQTPKEiI{e478cCt{+%qXh}Z9V50Q{C44QWsc*uTT;Kab>KbN*rsqw zCppnwBONk&Y&G`!0?8@)WFGbQrPrV}XZIK}chYb~z;6Q8?dS6reL;4EQuT;UY>L7$ z(MD*0s)X;8ijRq4k75{Uf1FbU!K37BJ;IN=`k5-NG@NXd$$Zw3&1$-Wrz%_w{@_BF zR3Y88|G2Tn;VD0TyoJK>e?#uwF1Fq_{0y)?%}vpt`Lj5bQZi^b&3$s=%KK(0+p86y z`gsAR95Ts2WKhdx@cw7UIfl-H5o}^PW7yVDy`D4$BdG%J z5Rwj895QmK{-R7Q;Y)cbL2b#%FlN((8XskjKkdm}f`FS<=gZ*=d;zQh}%d1P*EQuj({mvh_HfSt!R zo{hFUZb^BM&WC(isW2ZSK8kHyQm1j7_@q43D!A;B-{06;{mkKL0;sdfm1zx@z4h`t ziKr*dY>$#KVspN=d-SI2aSTwU1(^Lok}?|q`ZJhtVOf^lhJ|+k=I_@++No1}>O2ZQ z7d8L#k+?tkr+GyG#{1U}zO2>XC`^9c*Vq{;+0qJwKZuVR@8)_>Kak40);*isp{;A< z|JhYoG>4>{usJu^zeCigNu2U=6!c1&1Xa_LlISq0sRxKLN-zBMw2q;MkKXgAsI_tJ zG7Z&m-!SUhInvj0oc)I;ieP-1_%GXAnzMzAp$oeNREXDn?WIif_jak?&w96rYt!(N5Fg)a1@-XS1 z`491B^5wx+H?s!glKUk4s@(SXuwJo$edBlWG$xn;_q*rE!_?ZIYRZExmBt}CDcir* z`^M{697oID;~t+A?nb_{JLOUO$sK9Rs?>EkMK1i(bdRIVU~l$ubFl6Am$eq+gbfh9 zHrrZbgX^|J*7%L}maiTyhOCloEo(6^-)Mx?*U9oYP@RnQl;*pv=g#drC@Yk=WTmi} zsuy^3B6geT2|6_{t4{lW>b4J@C=kXfkJfyMXfe*cw~uH%cCDv|+P(11d##|0sCe-b z^QfHvtI*az{EdFXMb;;M%U?{m8lBjgj_-jM*7f5(@NIQmU%Efl#!r(%m>%Mm!$KS5S+=qgrS4;P+LCv}HK?WT~TCCCG+K-<~YJ2MUsax&QED z(PM}4@*Zu6a8zWz{ztq!{4e|PQZml+y^6BNvwStJv`0*i?Cde<*Ck#qb)rumD_xxW zwc|zQ?%CN$c7i^7&`ZzW#Nvm;)AnD~HY-N-e|DF6G#~-`e*vW%TIBX<1;oro?}i7Z z@@yZu`7w3mMwyB3O~b!~!UF4{0cFF29~$ulO?R?*t>bfz1bqubwF)=v;$Phk%0Z%y zOU)qr3(zUetY2uKBK`1{iY*{9_dGrNZw;(uD)swt8kdOB4>_EQh0;V#ukr*vEF5%8 z(HiwOnfnRWte>y{RG>PPyCP>v@(LSN{t$N1GX%{}GDzf1!~?cQ;;cw-g>lipKlM^= zb0@1c&~gC;D*ki7Z8I7kcv!`c>5fkY5=wMHnV+&}81{bO>*! zPkhtJ_&$yzdRjQ&QH|_nS0#r${b#hoX0p+&?*>u~vEfex_v3TOkO1NS9b52m9Go*Y z>(W1*`f%XV3mm^AukEjMRh-fwBtYq+*a_9+W=lg8=?EP~_=2mO|K-hXCu^XT0b z`J{NKh5V$kHT%;Lm;_1~mM?0l@l8I(BP=P-V0svi>3oGtU6Zx&VXFWs1K6ajX)V6M zcs#br0=Vu92xQaFK`}i|X89JAUQKbWA-PwYBcS(<&7%cPG02NcMc|}sP~%ijQ1Xuy z_D}l))SP>Jp7C0i9LA!T13aPUxX4CVHCBy#%ppIB^dahNL?<{bTf{@(GDuk2>H870 zmz^ZN|J^iR+(YDKNs+sYjJY^oZkr>ZkkqvI>@&Y~!NI09%djQzl9$75pHmZ4EECjs z>0Fpw0Vk&?8G_tqc{=YIK%=`0aV&GSYlmJJZc2DlMq?#&;f_fZg$dw$Q}{YTa{&%k zPe-RvpYekqOQLdtoLPF_oGt^!^2q&%xdJ*c*fup7MW?r&8lmwY3CJ&$R`;a>Mp{i| zpIUrGJNT|0^5ZF1%V(LTr&)8{-WV|Mg!;N{w0|Mx7>a7S#++c4yHT@5NfK^gxpcMJ z$LZ8+RX(lgL^6fL$lWD$Q{@#a>Kq(#+A3M{^X{Cv-wTg8hG(&#D0X7+9wWN{6zQYK z%d{(U7b&c0R6W?eS8S$wE3QdX?2tsh)@5SX`;YT2FSORf@8=2)k=suIvf|(ZOba@A zJ&OM|4e*ot?D$WbEA+0CJ}oUqD_tLP;X_lsiKGHtAs93Y{>1o(c{G?92NYo$_+!Zv zutH?Dw(>6BBE+>Ta|0nb*00c(fY8D&ei}1eV!t5Xh!<|5{8=%eKnbBm#P`qu1ofe0 zyBwN$nsCCEN^}!-^oTRmURxqO}L*I-&kp)eO#>t9_5(5>H z&{41`ObCk`MAjT4;p#>Nu5`4sp;EbFA-I*HHWynzJkVf*ys+;}A36aHKA`(qi#LjI znu}l`HS>z4t}k@IdD$wbhjMphWmSmPGW;tBkjo)|QOhe77lwbh=gF4IhSDjAX4*e))08+*gBg?5{R)s4O3>G%Z*eqVs1arPMeV3+9gU5A%p| zwM>;wWHr2;Q{Y4#urL#Lk^LtGGx!fuIK&Lfn(S`(1>RFOjr<(wsS&X9tha z39%OM?V?Oa?WlQU%vlVc%v%7(Xc+Wz-p(vB;oChm@^QL$96&uVYH=1xe%GH5ka9Q{ zqnL9yN4tnILc!ZQvs?0F$iyv7!sooPEQziAmmiV*^`7Ng-TEGXkHvP|U8pRYG?Tu- z)0Wx7qA*AO{f49(V>+N^ib<1ruxu1-L|x%gk0K+w)?6(3ERX+(004+kO~Yrmf*usk!_&`$j8uEkoTzUz{F1fLXW)GNFUBuYnmD<|A8BqR@(qM1&P7 z#G9j}7xQ!<`n=fxC`|z6Z_|H=*YG_IYh=p&3RJ{V&N(`F6T(D8EY!}KiK64k|kFcP#pn~;5w2-OZwn>g0tm(FUx6;dtw502uuQ5 z?V!>z5?6~&w3LqJUupj~>crk6-Iy{TE&hieS_0_oY17>?csT!{ctFgp1W@_4c+R-X zOlr&s7ImxS`pLetfreyz;;70|_{v*fYi$PHW0zCQ_(=%CWZ<&wtZZ0nm(=StzSiEh zC9{Y!)vLf0TNH6+(=YH_Ez<*LWML1Rldymv&Vn%55l1-BYa3$~LE%&|oOD3pQ+Eidg;l3d z9J8sSNnV1XexJqf{!N$HSJLqxdO9ao>|J=r7w%5nuYxDK48>26@vW8!7cHePt_<&Sb6;M0O6mJ*@m4AiSSc1jRil`+?9#`jdZ~ZBHdw2XNOVg>k1m z7EHx}oPPQj2}pRW@(f~6N2+VA!`ceaaY~x7Clxbu7dNkbSz1_Ouc~ThpQy!{6^L-$7u{?SrY1xEGMx?Y<}TgCPmgI#mK{UO2>hAzH9o!n5rDRmG2U+jNtf!#(;_*Gp0oeHHtd-(4r41i9V$_s% z#w%7N+W#GOGzWFfDac~@n1W!-JnL%Au`v(UbQP_2H>8pw1y*{MKjYWXmK(iWS+T0POitg$nVyXoVEI$o^J5(uS)sx8{3jDWbouJPodSB;X^Y=_E!F zOC@578wj&SZX*joR~Ij;-@BsRm|#Hiz#4NJcualDY7{G-o_XkoUWjl}7zbIY<81OP zMAJ4iIIx=mRjEB#671FPX;7FaL&3QSe?pa@kR1yCVV4ictNu+j{gB*HQ(Bk&Bgzpl z5Y{v%63LTsH7J$LdBt=xpEs3%v;!G@V}60^`SkEKL=%(>NNB@Bfb9AgapeLowT> z^!Eyfr$P$hgP-v5Nfr*r27$1GcqdRi4H^paAhEi8luYG+aLAf=;EW;NR@88)D#vH? z|9cz>@Q27Wjgm1K9jGT0Na&#KU2UV8XW<+0MmBgty=wp0TSFNRC8)Ik-a({48k(cx z{W0#f=QF6zTOc_lboF>WT6GCQpeZ`-Q=}%P1L&Z_SMS&;K1Sr$2ql)%uo$UWa2Utg zdN)mdewr`<+5x&Sa5{@@ma+luEkB zkeZ%XKfp735aW7EzjksRxXh5AKzKQi7zadz*3EN%fuDw-ttZz(<0oFWNVG;tiUVe6IUply{zDBSmfS=gp{X9+a#FIH1n|wx?I9H*UVP#KM>bHO{ zQyV={>3!ub#=}87YOK%uwW6$pcomF;YE&yjHPE6&;`ERJGFKKa3Nr^b4PZHO!Qx38 zA5Aa7EbhPz1mGekrxwsJ=oc8~i6ikx{!PzpJ}#OeStIh4WOr;U)c4xcZTeYK@Z%S? z_A2r3^iAUIkJ|LD5mr3S1%P8K2>pnFv|b>a;Ix;dmp#sP$)Vt_r$-)1*Gr+zgDcm+ zE)sx1E`X}dcmy!i8MjH5^L30p&w%RW`!&~O@&Sd1qu5B;W}J*6TA7sK543qn8U@?O zgT{9A8Ya(lX!X)dmg@9DbX$zLTssDYduW#6)#l zz<=1zxC?;kOgAD0)ki>sNg_`dzm6t8mqi(za<17vjtoRgR;&y8jD|Fo& zg5(cGrP8&LiHyEbtW7vI6ZskO2(z*urJ3(f1cv7(|Gjbqc)K78l56=&HT}Dl7c5l^ zl6at=0Qk2FD9J?2y8<5=*QeQa5g5hrmajEIAxB?&t zfQVQ8M<|)Ul>`DF7R;TMJR*Ewx0Y>kwpPc&y@#i7li>3A*@R`_{>(rYo&VA|@@pcM zw=&#O@mAkx2z@T5T4a2%1#_Jp(0$Qy=0LxPIynzURUP|4xz=E5vIO>GY;2EKH>tXj z)WI+e9AtyAIjDP+GGxcTPQ4I(#l6hM4mgSY=@LJgFDG3+k6k_O9ummh zHER^VMg)?tS4DB>hy{nWOJu}{O)IpVQ4~h#!u%trr|L4TueD-uIW0$_$S@y!YR>KU zb`+0}#+P7%q&b3Me(u^w#OYJnPx6!i7&rFjd)J5k5uGdu^14xntf_TdjupG$n%TMI zwQH)-oZ%~aHFJTMTy<7v7Co78;_w3zA2#EE!Q)hyUeV$3;v8NNA27Lg29dtZ-!@Tb z!wW+!&@Qdpl&H6x`ocFq$r{a}PVI6P@WHHQtgUH404MD_D0&>pna@_O zRlWgcfpJCvrlefq^8HTY1B=6JtF97)E8|l`R}yhu#IgZHIcuV7xqK`b$PBNWNEylnHXb{9PS6Eg43Q zdkh!Hk^NeRqrQI+f*Rdd{(|frXIs<6Eo9jV@Fg{Zs_MYA8EXTJo5}#mgfAw6KVxSu z;z78gVLirY#(Yx2ggR-CPY?%7mWig8Ci29N3D@f<;;y$cpp0 z3I`RHt$wrKAv+n*b$qn$=dvM#eZmV}UKsd&o#p>X0gJUOzzr%Ct_+>uT>^>OkchD! zU3u6gN!Bp|utSQV2;PneD^@4lOfY@OUA0et!XW*7LYOS66*tU^w*r4GR{+TU;iUp) zR6%cYSFv?64B5R7%^qDED?-s00zU$}Sr5uB03-7dCH{xG!e|(zS6(XeZm3LoQoyjC zkC2z4bFb4?qd$YF`jML?4he>-`B4Ei^UnmWm#^2rVdOp{`e?``OWn=9AIR!xC28Mk#`ge@FKEw`tj+6uvMOe#IhcV}%d59G6F5>}Iu6!Bw zL3eG(VkWVnc>n!yJHAU*g3D>)28ai?t5&Cy!8PBcxgQi@W+IYolZhSkoENt=C9ht} z_6z_mBv86Wav@H^Vo$?tUL^Iz6RxZg3;bXaZOF4Fl{D9`rAr~M7vkXRjJGq&lN?ui z88cLmecm>Iz?(WC8?k;5sH>-b64OmhP{J9(+wPjvwsbhb4 zQ)>wgPOlZODQl*ob)mNv<33goVL@^L9VBO3?G*atd0Yyg2& z9n`6dK8~+G0ug&Lj;oBd5b;T|pCvNmU^=?(_n5>g#r`DkHm4IG76plK_z&7+olDz9l((^6kX_9>SldSEOAOM zAXCCNo9^LLaKp_fJ{;wtTo^7K0}*!7>2=MZ>#TyDpz=Y~%pVH={po&gwW0y>*ZXNn z|0oRAErI#Ys+K;NUl%{02rW&8l$cMfs>J68^7G4q3vkfD025vWIH2-E&WRQ8h$|$| zq`~Mf!pz>Bo8%{Wx4tmxr3cV6vV_UIPvM-QgtkY;NROj3#N2tNk>TL)0Qn7Q$a5GP za7ree`lLUQ22U1<8Z|pDXu72(<%H3WT{M|N{V<#OGI9!b%i`tUfdg$H7B7%C2_-zw ze#^O&%8MSu%orAkT`G&bZgC3$nLpdKzXj;eQ#`HyerWy2`WJc;2Ci?aTi@I(YbW98 z0X}KZ!5|rB1Nc~=6PVsR7IzJ`RK`^n8h3mq{=|uv;)`C&fAvxyS~bD452FT236Q0K`xn`t}dt-ce z2O4va?4wv z%Rc*G?tAMk90yLcsh?=7@jE2iD9K6P5ZPZEa=YXzv_0ztNf<* z&E`75+5q`cXIjHn_Z(vWZ#seP(OwDp)rz8?5cGw}Es8i{F;ND_7slSSyVh7XC_Bg< zVSgDu4?u@SFrp<3Mho1qhKgbtZ2oI%<)x^}ll^!t#j8&bmXqXAx6Zstj`)2N`>Q)c z*IQ!_TZ?zuh}j&B1Tnf-b|eF)%+jk*zWnQ?Kwt77A{>*|OEDI7KARL3Ftdk6eiGl` zjg)XS;$|gYX+y^wfb;7dqY=Y{sIt=oRt!A+#NbB=xw#4qe$D|fU`sEANao(8I3iM` z&wc+z^foJI9s5y#Nkd+i*Qy}j$L(x4%Azz6 zoiOAO-TCAnjBC_7U?C#)l${WxyIQ!80m4C|e+A?7EjCo&ONMEQX25OwIF^&==&-#7&fQ&w~NR<7% zJ~86UJ_?L^TA|2hahe&Y`{esQ-B10Buy>%QdCB|5k}eq+&~2tMz2aFCA-NOl`ow8a}BaeE%O#o zd6&e4yB$+=W(5Xx-?j;7g?VKGJJus_w{Bwf0KQiArqYV4=0LnTkFr|p{YsEPTbWv~ zY67AMySe5XG z5a)a;H281J16c?GE&vt;RiFjrvNf@3#qZ)Xht+;ElvrwBy4prtptyjyG#g<h>R2w|T>KbnglF zEJ&h$o}DmzuXV9`FaJ%b{IEQ`4xJv|Gw0lYwN$PyEF@#89p}&=t#5i3j#_E>69k3e00M6D*R^dcZafJ@ yMUiGFu-e5G4SY7evjH{(;{Rqf`F!9|2-C~8>k*Fu>0j_e1Y)kxB%w-_0001>^MykI literal 0 HcmV?d00001 diff --git a/docs/.vuepress/public/images/apache-struts.webp b/docs/.vuepress/public/images/apache-struts.webp new file mode 100644 index 0000000000000000000000000000000000000000..e6c5f6373c65e8816f69105b02a3df728c52124a GIT binary patch literal 7416 zcmV&DOdG3W!m||kTm4WG+~_XW03g3WbG&j+R$8hw96{4VcmVC1|RLOid1 zIMJ|hxDO-VZy91#oV^M*81=U|CffSKu*bu0hY{g$ABBCcC@>(-TMJulE=e^U+W8`| z+utuT8JzCpu;cQ4V`1bL*mR{Q!AQvSM`7O^2ABs)o@&^7$d_dpjM)y`Kj=0I^8HZ4 z@@}R;lBX7mSno|X0>wZ)H3StaB?rr+X&@6afjn1p6f3t>B`ej*7aKq zRsH?ilX4l}AQbgT9cILV)296E%e8+68c-iNux|d$yGLjLKVF9k(?0#__dqQg0~MPV zmOgZ0t{B%|sBEkyU-;fW@P{|OInpU8y=xpzW4fi-%6sp)|yaEjwXxh@c17PUge*Z%(T2pao&ibZl8o)%hMA6tXnk7X_x1T2Sh09-qpc1NP$uWNE^qL0}HG*r*q?*un$I z>Whw@Xrmf*>H&_!2@3ZD#|>olS$o2TEuH4qiNs1aA6ei18d46L%z<$V_dm8JWPRJa zsr8~A`fv`I!+8=&Zx6JBW4gMfhuKC;z@Fr((S_^T7L%e~#__$noeSmzPRWQmHEF_h zw!2g<;V9ctb-RwuNAg!{!oS&us2Y97hR(|NAloh4_BC4%WxI`IsIpCCo1ks;*m^44 zFpdez_Aj=H+V%z8KxI3X<2q$~hV4deD`mS=*-|;~RW=XXo7(ma+qcR_&1?@T+ZAj( zv~3DobDpXtMcHmtwn8?H(6wG{_)yjIz&=UYlIqx2J2Z{{Vv9^vv@>PI}~gU+fq_D`j7*7 zCsoUecz{KxDOXN2TZzhb3-VxNe;uO*T&VYEDAxU8cc~nea3TEODH@h{f(zJxTe3=} z{KDsK$ z69fGIP>xQ~q$)wck(csR#(75_IG2(J(D{1>0k!Y+(J1Qqizp!Yp8{1$n6e(c!PB*X z+RYaQMCK0FCrW&{P81NCKR`WF3$Fk75%7CR4~VX=5Cve>cx@u;G+P*eC1=@K-5&xE z1R(Yshc-|fUql$NW{frwP1qz3;ZHi*mc*;mNFRs>E)fSTD%2)&xV8ubsyt4`S(Qy% zK{RZII5d}}=n_%lb(@6&D|#!Dg;2J9H3O++-jTo@W}RhQtS4$=^!v;84a zh?Y3@iRiq~n*{+rr=lz^Bx@CpsOMX?f`IuM8by>pfR{^^AeTggF>=i@razR)nc%@tyU2^C;co0A1X&F=?@VNpBEK@l}UO?T>?K4Zb8FZzUYjWMZ7w{mW8|0?;o0J_J$iv-Yl1cr-O#{uBD;l- z{#uYd&K-BH71m7b-)W6Kt;of3DXt zTEh0S0?;UqrXH4*FdNpdKyR@v0DxZ(XxQy+b5wx7V}sw4+t>z6<*a0irm4el zwq5@~eMrChv#n5qGa_t}bFCQ5_OMj_!MvZ;A+4F|NDC?(zcSg@D*=7Vh99ix$hJVL z2iO)X1np<4*ER|7Tn0T%^}ZQU~WuPi7KZ3+BS~u6GfoMIsQr!*RF{P zmrIjh$2Nx)A|K4_lxKNc>5{INWIEf^s*t*u4IXi{fNgKOEMJ0sialJDAjkD=pDPb) zN(&?_!JAGQ9J|@BPzAb)<5-TktJv_mB$q|ms?%)YM$Ai>Vm{l`>H|cUxEvB)6ag0J zN^milqq)l9+{A|I;*$5XMK6`2M*!@vksb7_1Ge^+pl6tEqzVCeNuInT0C3;}%aXRT z?I2~K@f;1Eh0#N7s2?do?ryLLJJ~_%767QZ$+|gUZb(t2H>GhdMT^mo+FJB7*rzK5 zEoH+8;xdl0p{mHT?mNKwKH0&$X!(b(7TpB)IiwlSqV&&NZYGRK|w+;+$(ZfFHVA zkUcXB-h0Ugx>qs)M;=HKc0)7RD^m5M-Cl71=Itz`a4mQzszr|`HjEKQX9aoC_(n%T znU5R;_u2#-NLmBVijrPJI?e*`W26<1h2U@g_KIwtq5dZDu6L*fz0I-CA&l> zkj9lb^4)6iAMZ*w@EZ7||8?i`6!@yadn8LQ9)Z~ApI^UbK>L4W_q}fB4)8|?kz$-u z&4w$)(U*Jx>c4;CvNPMXkX<Vgdq4GQVn{JV^5N}j8!694Fm#Fh<}jm;L@O&R%-%52wv*Y47xRJh4@Wr>XBK& zhP%X3_AlbBeTHm-ifXM8Uy(<;LF10fcdRF=2i?taBugB%Ul#+>=g20g|8Du3Mv;C{ z=QXlbpHC{1xRVXjETELnr3<>rHYj_RY@sViM=0^J2B`wWNl9o5M{P$7$T2M>*WRII zBShC8m8$6)(i5T{|CQ+X0#X!O&4#zFAR4e!rn0tVFVwbFq7$P@TgWkan=D_pC1n}G z(cIe-N_(+RmYowQW@CqF#0ptfbR&%+a$dblhJ#m<{5C@6Y$&saDDVA{3?K;nCUrz}zbDRh$F^_QCL z9!n?h)4Yx9QSVKrllnc&RHM8bo%A2KOC=7v$plRD)T%2Z=#nB=Lpxw2d`4)gp`8~gPFG7?8_v8x7e3K@z{_ix9qz+%@Ar$zu*`Wg6xV_;q>_2r z_s2N4@^msYU3=ryi8~x*YNmUGaVYBVKqhDJMR8}#5HdYof5w%1Z!(#mY2L>8QQnoz z(9ZriabPl;qeVO8K**O#CTWtVCf0uLPo`$+oaNnXXRvF_{jz$%Jj^3(FGnWs@O$?ix8Z3?OsX;XYzrr6+-m z+BUwhMdkTq+@Afj6~A3XCaz=ZK2gmjsbuJ8c$*k%8J71WgSXEQt*vgQ!cB&+>uE0m2rom(c_gdIeU2y`L!mdBC8s(kIAWnO3)+J!eE>gjy)Zv#|NMNEe%OER|CjIw{JZ+^{ol|3kPls7Fb`1vvVWKQIk;vq3uC*x zHE-b>6K3>n$x0C@3S!3JCIof;^y} zHUk3{%;-*q%O6f>_g?#Q|DzU%loS!=1q69PK^{;~0y5T-Cz~Q)HYU8Zhxas!ff{g*H_zy{eU)_eLpffaP@Q%Bj zZw*1}4?y!$0PojrQZ>zs+B&sdb(>cmX4S`8q(vp3)|?`LTEIGB#_n&C$)p6EsTy>jQ8#iBz!h&&ZS@syOZsj9i zy)tSSLh<-5zn>eiogd(7O488sf`UAtppPghBgzO&h(VWYR0`uG&gIG!T}H3|_KvMr z9cIPnAn`n*y-J?GjwwOn90{n5$`PSHzfWt9PLITgCixHM!*vj@?IV_(Ik>cojPnUM`AmY z|I+Dy>RpXjl!ES@Juro>J%Kce^rdH_{RJz1*b8eQ?jGIPo=>u%ET%tXO2J?2&2MA- zg7VNn7`00VtC?@Pg%?Q#A}~z-1pma*>7>lt*=B}+m?s8Tz2-nO$#FLeB&HPtKgXc3 zi`c&t?;#OkoZ=3sHb*IM${tnoTb~%cSziAM6RgwS7EP7)P-%%P;^yLs`d~!tHqp^b znw~h)+%eJrJLWlg0`yBFPx^MW&B!_)MKL+}1c&>8`nwPMO%bAoK75reTxeS0asI4p z@u1zjSf6#ijlAa1f2vX>hg!HXN?^>KDC5~V-i8tZhR`sQsqm}s7oYpNlA93n}D~MRTE1B7wK6x zmk(>>v9~(l;uWRVJYvhh-L^C7qh5RW?lnh;F$cE7c|hw%z$X=(nIHVS0P#kH4b7Oq ziwJC7Fq`V&_QcsdX6*Ypl{u{=o(F`dcJY%M0-gRQ|1!KT)@-Sr0W~J5P$NoTOJb0Z zA!<7_6E@$tVJyQ5$y&7euty7A1Yq@{lZs{VTzGPS$?3(t*>-tZwjF~B0V~4i?2qI7 z`YMR`#Z>=`&7HMGO#2xe(LKsb(>c!A6zpex1MTL8W-#wNLinx@oZ5l@itey|y;_bR zxu~ zN1NFD;}3U#NG`1g*9YdGy7lUz5u(?)&};W<1WQ=DJxFs+eoQvxhil#N-SdTzkO{XX zv?OxJC->k`%buWbx5SK4bgc6i2LEY$QOc->zWtv5jFZ6*QTAa&fB`u6&1AyBji#&) z3=?xz!%X@uXo_v>V?nFrk1MV*`*AL+R$QW$)Sg9V z3$QI*?>wI0t@CbpVxeKFM2W~ZBU+`m)b?olACPtusnq}hE10<-3~aq8sZi8L%hYJCPfuQaK0LqK>4d5}Y}GA;uST#Ld~~ zz7lFeQEa2p1QR0X5QHXgXhW8o_}EasRq_-mm{#x|qT`s-7vU|h7<4o5nWYbV*XJt; zuk`%!f?CS(r11VK_=m59*&qcEr?P4wt=4K*T@9o|m61uO*aI_i+DLVk+GN3nI%CtK zh6EkpT8s86iSr4h)(Edf;lv<+AS*)^itGRe^-pnzLSWIiAc=z^q!)P5W-CG84Iz#0 zTRm;U4g{`UfKF!-N%W(lGU~#B3A`JMTOP7#t<>0P4Sebk$V=C&Mz`dlY$e72{9vXw zhhiJ5?H)IukcR@jxFt*5&(_dboVOChuyWj#I8a8lVty%_9{Ah^M*xT90Nj#&!x$>= zlxvyo+V!UPTA((GxZ;J^&@(>jPJ6x?6^p4SK{K6Nvdvk4jnswe$bxrlj(M?K&+ls| zpbgL<8nohIYXbw*dUO7)vZ(n(1yL2c|CGZWu9)6L|%pva*Wm&5pUOkYB-x;?OEG(VQZun9IoJNF~x5@5S2p}2Di~ORuWXXEg$Trzd64a<$${;ki+PC zS0OBHW22lAz_;B3+)#fPpQ{+?5`?&Ae9dX@IJ=s@GQ(h-aGGQ&5E8IQ$l<*!?GCtUVmI#6I7fD`GQi5E zFtViu{wzIA7xiWF^;s5;Gt2)pO70$v`Yzeewrs%o+Sezv~#>4Dd@h zm3S`krIY_68`hWJgAS&^U=fCQ{<@BtiQwH6xTn(QQDBmIvfFUKB8Bz~?EW@zb z1lL_0ew&Br{hF8h^6ylv>-P>mVt$UCy>OmVYH{+df2C?D=mpLPgKMU$(?@U+DUKRf z_L?r&H}qdRtb113M~L971R6Fgo&0?^lkZ#%NTdbp8rtbRkgp%a$pK*E-C!4bH80N$ zM$$6~{_{H7*~*yh%7S1L$)NgruX!)EFXyFC{_xxX|JLXwow40C9ed+CyA!@?nAf^q zlVZogwIOeo|3qRH&V)OZ9hn_p@hRco{V0F{006fdTsKDS^gr=oxgaf|`C7+ixDp?l zrvJt?D`0|L`%ouY6lfo_*LN@rUnvhue|l)5(-_cD{!A%IqK>GzgCIG}z~_nBG$3RH zQIIhd?AJ5{CtRm*$uXe62G_-1_-N5{FDq7$vgBuf+zkp6EigAPu+aFrbtxc#FX(ryy6ux$<7_I+tnH#ANQ5ZZs{2TfY ztl?N4swK>#^fo2GK}&Up$#8FBm1%mvA^vB)Tu!dfD@r7mgGn3B6tv?BD9&s&xBuCc q|NiE0|J<=Z|J;pm07~)rKs2^Fb0ekmuOzJtC-3p*m;e9(0001C-F1)v literal 0 HcmV?d00001 diff --git a/docs/.vuepress/public/images/apache.webp b/docs/.vuepress/public/images/apache.webp new file mode 100644 index 0000000000000000000000000000000000000000..49394c77f34d9e64aa5b3eff9af3101fee815f17 GIT binary patch literal 1542 zcmV+h2Ko6?Nk&Hg1pok7MM6+kP&il$0000G0000l001ul06|PpNEHGA00E$F+qP-D z8nJELwr$(ClPBA@ZQHhOJGr(!$7v61u6@^L(|Gqf5dFP^P8<)f4UBRiCyMpiO`wPaIY2#sPXt~_sHswVV*PSgKs~ z882a$Hvk5>TNL|#33s*!16^17d@(p@D6wyQFyE#6%?EfhuRt(aA71DZueOD`eKZo# zh0%i;ZQ!rpZTWAaMk9dEK@39iy_OfRdTld;NcC%!`gEUav8t*wgPPLm1a=8%h%C1qpMRt@-!}bZ^Q~ zN?HDjf7A2#*>&UErHIx$FhVcY41ReRW=yxfW)2lM&9~- zm(2w!x+vjo_58Rxqc}OHkx0T))vD%;A&#DpFK(weB96Bm=-R66uALUgv#oTkTU*yQ zq;YMOxCj7NP&gpM0{{Rp6#$(9Dlh;r06r-ahC-pC3C;r~3;{x005Xi-uZ`-zgddIF zFPcH!ESCONzYF$_ylv70%m?cy>$j)}unpi3*w0`OEPva7f)Cq2NWcDhpdE~VGw4Y1 z(e@vQ;RPyRFf@TF!+7k~XkKmh*#?nW>X*Z43S77S@V z|L=1L#_f3oXThckkoD$js~&h{K~`EMms+FSc^fB)y@>8W$C3S6q|b2nn>F5bgX@h` zp+=*C%-P7;Hh9k@)~dDtZeXm<^(Zx`i`2SsJ_EZ`zvaaVJ>UfEFL%)GOXck8r2yZ3 z`{PEG^Xzi0UX-rOf??3CxvS65LCrvD{6x64t!0JwhO_xg|YEAu4>#bp`p zYBViEN*!N8p>oqQNuzYz(&#Aun-Y*))zvIde@Ra}+3D4*KqB)fH`lW&%Q7*DOJn{li^v4!PzSM+bvQZ~&M$R$Ib8e`## zOhU-s!Z-5o_p0HZlp_INcM`E{I$Onb#8!OzFgC3Ot`8ylDEG49 zp}jHK-S8zE!cD{3|AW18e9YsQRix2|f;j*5`j2hj_F`(N%ol@$KPcIxzpy+4DcYiT z0c#3rx8k}UguqzE8H6Lrb?0za-XqJ3pIO(!RmJC)>=M_CpRM26P4?qnV&6l62*-{g zKaf?Ihqfeel}Y0R?CGZRJ~!X?TUOvo*p?7&yPjo17QJfMcY@zBd1?Bm;iX?km_>P~ zUX!=E<=84Z~s5Wd72kjIp8qn7~^bw~QM?y4D^u|f)_j}TKN+nw*Bvi3d-Yy7Ufv+LC{clT_B6wH_g7=3@{r&uf)97g{|e_RL0dN9^sXo_ sB)i3(ZemA_KfQr%-kB}ciIJp<)y2&8;{_A4LB+A_K?%11&_)0N0N_^wCIA2c literal 0 HcmV?d00001 diff --git a/docs/.vuepress/public/images/jackson.webp b/docs/.vuepress/public/images/jackson.webp new file mode 100644 index 0000000000000000000000000000000000000000..56bd53086f63383866148cf8e2309501458897ce GIT binary patch literal 1828 zcmV+<2iy2kNk&E-2LJ$9MM6+kP&il$0000G0000l001ul06|PpNcI2#01bfMP;4aS z$?`7u4fW9n-BAH8P{R$8oH;GSV63!?jqV@DVGTd9r zNWG*mTl`t1qog_p8Gb&dtSqe+>)Iisv4mNRy+Z~WT_+PcpRq1_ipjHta`309OB~;mqGW;>XH7}EGsF@A_Wf-ycZ!g(j$Yj zNB2z6XNkhmhR>nKz1y9chJwk9spm8|0Mqd;Lorsuz!H{0`*Vj|Ly;-_!)l@=m*n3^d6`Gmj93Z z%l7a52Y@$te~$hE@B#eK`$zsC@E+!0wtw6H@%e%5U*=Ey-{C$0f0KV!|BLq{^HuBH z_3POe_GkZ^`wJWO1OwcfEz)ItSa_sHKS`yiNWnA{;LFrjO074z79q_>jzcbgdi3F2 zM|Use6_qjye;yE#;}%aq0092~{>}i8^54o+;4@AFhWClPuZh|QviLvSPlL*^8x4S@ zPNfz%W?FOPS&pI$L1jVj&VivO*oX6*mg+}q?a>v6L|~Kwfy%OE&(L5wivSc7_p={w z*T+kNRsRzn{}K+)B{^34vG#nXu znq|-Ppa0`-f0QC50@Ji*LDxeyF?7woVC3E$vp*a=JI9P^G;TTGYy7E<+;B0s-(B*G zWvjl-`0s|2>C{dYIUZ=twj1h;U0(+$sOOgaJI|{?ThinsR6DX1*e>h*gc_lmd`tv& zG8^}yi6bVT zyZ4JF$PTU$Z{(jN_|SrFXp{TLWxX9@NUR6-8Cq7onG(T}SGKT{MVz`sKopfql#a!O z%hof^VC+iJ4X8VWfoGb{5TqF+1d<@I($;=?Lm-2}b4a!u=u+M0=Wt9|<$O?^#&AvuYlrr%NeLt}2NP36kgd zpWzqK81rAG-)oX1y)7SywaF3QjB{`}5=4TtSXI%M{pD6Qk?iZDx3dQr`YD;1IPqeD zbDx2gXqgq2bP@McCB=m~NJ9*Gk-A!_++O$p>uJNv&AGL!66v#4KP94^H+qkTj`K>U zu6+&N2Dnf99br@I2ezlFI!S-HARa4WolSHweP`r?mk>dJ)Kyfu3VDO-LsZw`5lz^E zGo3|hFQ1fW0m?|wpgr~j`wHdNU|1VcQa^(mTQ%)JshOFJdvIAfx|OtBF0sm|j>@|2s46|vDqDicOoL#Qkb7Sv`?ZjdQ2!l#6M1uKTT7#GIIge8q^vacH7=IC zl7f?|tvsLqF2#)9|Am&vJYlYd2R9y>OmV2wWJ~a2uf+U>7UQ=p^0r@!OMRLdZeD&&o6-{3Y^OxHa#tEd*!m?2F;TVsmo3ou|b SWPh7zsl?`v-6QW#nJanO4T1T+pqY7Y%ur z@3P=zJkwtD*@c};n<&St`oL9}ElkT3_y1beB-V0PZr*#$-1Yw)kG}Kxb398o{`2Ge z(WejZ-oAW(DYYdd7hs(t64 zeqrwX^x)iI>*tQ`{8I@(eJI*8@~>A+wO?-Sn?JaDh>rtfl~E^BnI0!>ZyU^YhN5Ak zwp@;5ihm!yd;akMlR!o}7RHf@JKAN*NMK|l^YA|o^U<|}Yix`+llOJb z>cFetJ0<|{Hq@^ibCMaCrX1{%1GTR)LAax!K6wp}WhDA#l#dS8zQ)M(L1VqivC7UU zb$dQNF?9XNh&6toQ8z+PFoL}hq7TL)W=68+fd(BYbcB)Z;R2f1CY}*)OnYtfp2vuH zdv*=We~OXstGb$1`ocz2K%^-5(_e5Zu=Ok#u_(@8C`#@qPoS5vg7Ni zY$T&?bEv9X*oli-B2-i|j*+)DLNx)m7=fp@RLd4d;witVV*n#^OA|Fzwon;Ms-e8# zCydVH$|~;vjMCo}Q&?w4>obq?eqx@%?-4q-{dTgniA{p)5e{xIq zMB-yl{M|8yk^ew9WJ{pGSAMRGWD;P1mj%Yk0Iz&pHIPYxeO%=AL=JfB?V46h671@l zbF#oymsDcXU};xG$pcee;P+V`cxG^}4U-6~J9kJX_}!`eHksg}Qv;byXv^iyF{yyH zcOs`%E?DVAPbL>Wbz;9{zzSz5Fj+R}o}uPUHe8vZ#nQor3_X($z8Ev`Et3z6XQ01? z5T1eE62hqTOmPyzqV#Gq32|?FV`PNO=^c>~-lt8f_m6@D4%|S;=VX=d$lEOv@`y_>Z4jxGg$J6-RB!yFHDlkd$a+(&h z!i_Y8rH0v3!%nH;lGN})R=5bjkI9Os02GxL{sB-!TG#_1Tw2%!ppUe$62N$AVLpI) z(!vA)o1}$-01inDZ2?3}3ylCgmlmo3NRk$c0)9+d%nSre3ts^glop-)bg`WVllNL%!4S_O4EM$foQp0YkVTRPuM`~!0=D)H+ zku;%_LW(I(9ZBIn($&b!!89iZNCwTEXe<|4vp7*mE{KMc#;;PrY-ey?DhP9GhfHA0>Qtmma1BnkmI-D% z_pMCO)Hzd08|1ECq-QVauF<3y4R<#ny)kYJvQb_Mx8WY)U55MD5#9&|^rt&}5d~DEy9-dD zkA>`pDFNrH&R#$fv#IV36!|mN4OT`TqO;~v1|HJfekgPu&9zrbZ<0&Qq?FPmw;oD0 z#!y@%#o!-;du>wAXo8ys<<=*-3JUT|Cbt_<@=0T2b{vYoLTMe9H=odA{gv08(B?t;!B#S}mr?;Pk=b#m zaXOi`QAJ}ad+(!)Oco-W3U!{MFJ-~(i2{Z@HGq%pHDgG4VqV%a_T_y zjj!ouCvq*|KHJ7ES6<-dkPRPcMt%YD2MK#%#V~W=>izuj-LaMIFiIQ+8Jb zR`0#|Od@l6^7aNswPa4BmcGb%VEOPd+wa?$+n@jDuMTV=maC>TKKaW1*!lO3=iW2r zK5DFvABpA8+P}^{N?@wol2;AJr?jH#*rqDLcrs%t?Nm_MMrO=DM0q$&XN-+kUOP%- zEfwbY8J&6wow{W9R8FVnn(?X+cE=sN)3K*WCo0t8ghJ* z8L&WVC~l*&R8?Rbl|`$g29^D;4xA*i+A3*EW1meb!37fA2(^ZiSOeAI5`mqCdP51U zv5Ihkyv{+*q2$#-Rk%Q02cYhzw3S>&WjIG#eWCUyl(hxwKSx*hGHXC%vPvokEj&q8 zU7?9p?KHI*8o7a_Hk!1eKoUXi^@3*pK~Fn;pq+tlsA;hYTH1}6CP7<`S18Ha4_f;p zAtkqj_U<5~*dL(5`QwS`dNFA7KpNVT3EFJBL_oU@fA|&CUu%WG=CJ?oG%9*G#;Uu*#1W7V!lrlvo$aDGR#gcw;Mr6XA{fEeqPX1 zpR<%=jtqj%7W_;m$x+`xf16rqPa+leNtI)VOR<|*v|Y~4BXh-N(%Q^w9gH$>}(@~)SFA&<^z9rwhF(m z=a=@b9so`aGYhxU|=K%!IG%MA#M1X=Tk`(j2yBD1I8kQ&u>UbtV)?xRQkg~g( z39c=$TM$(DQ~*Q0HD)*6{WTZd81_U6l=WNy1a;mT=dy>(>cGwZlM)3$36BPVSEX(X zPR2R$cK@_C`Jluc(-J(sf}W1!d_Q*Y)o;Xz5hDiwTq740oMqrWEjhts**zl_8|tk$ zYeQUAY5dD!fr0}-P@gk)wb@U!_XqG7f7u~Ki;O&xsvg_tDqi8D7j^cZ7;VpYm-Zciu^HPx7_3L%t7& z^HKbDQM@?zF7ZRBv5U4Hym0?W@6{M`3-RKRQ@_5YSbCYUwcH_NdDR= z(uVWbB9YdYzam9icm5hC(%SJ?SCRG$e>E3rq5M@>r2WKS--)z3{FO(fRpKvSkye(w z5+Txya@PZ)R*<_+3AJq8wNt2N;;ty620L$!7i)36)kCbk;H@yRc89mBinR;8m0zqK z;Vi3{Sli24uOZeqa@GaGwwSYa3byH-HAk?G<*XrsZ3t)mBG|ffR#m~)nzM2XwotxG zhG4J5S9e5PdA|Bnv=!j1*`h6gulk8LeC4W!!tFIz6&7ySdCFoEZby0Q7KHmwp4uwj zmh;pY@ivL4!o^!(o+>Whe&(noqj;;qQPB|Zg*j@ufb-?3o&pXr{8UNA-R7pR-XiWG zH=T!wU&&1ih1>*g>L}zob5kK9SC5yTL&z88rHx|Fl)_0p#T*`UQiz~C!bh(m=vVO3 zDp5Crk0L}}C>L3?in>BvbQ+@GkibLZgdNWFP*rial7rqG#oaIt+5mB1n}ga3JU$fy8gi|(x2EVa! ziS1h=z-cbo1S%ZFBeoDS$YbS@O`yXA{9z3tgpT~N1caD5i8o?%QUbQ}#&D2g7-!t| zrUjpmTw$#VVw}kpb3u&-Q#s;MCUU@Tey~&pJ=WugL7>PJys*na5CsL!iNCs0Lci`&3W1 z=K!@9d7&Gh+kjw;zto8hxk0ieU+Ka9pFp*R?rNTSoFC{m`$di0RS2XT_>Y#ItPAQj z&DE@vO+djdW3cp5B0)(@-elQ&YH>A8JfBav|pB%~)-9NDZh5t$Y@82_n`R46!+CQ)VlK#i;>-h)W zkCJ^e|0~iL#lJ@XJ^jD@Z|qObzx03NJ%;|I|3Ufx^aK27`X~IK@Zaq}Vt%&&cK(y> z7x!<}2ka;8@BKf8AMf9>UgUqe|8)P;{xkiT$OrRJ@IU>(HUB~|i{uBHc`)}_*yWZ0Jn)|Qzzx6-T zegHqA|4RQA{qOf5`~Uy{`hS9dzwjIT*Za?4ALT#Mzs&z<|3Uwc{LlaYw$I+b-~WC8 zH~-81C;$Kd{}=x~{`dbc{8#!v+E1|$<)6~O*8g??Isb$FkN^Mve|J8lA91x)NrDPjdn^%GziK8GNq6@NRYXH7)<)w&nTN>RL0Vs`C*pf?PHSY~BcN?~*RC&4Aa|RYpvr|i~tzNz;!L(1= z3!*r)w8vO{oCT5Fcn0H9VMebus=N3Xz_o&|mLKWHFcKKX*(C-fB1?homTS&#T91^2 zqmV+En6xt=`OfHZ0aBVDxUSlv73P8RBf%7THWbi;J~R?6noj(+j98~IcB(sHn{zYX z#yMTA*OQ8Dcs*3L8%DJ}mg9ji8?g&b9Itb=Ov91eI0D9@0gsR}a(_stP$ ztfEdu2L0X&$Tnh@Q{eY`_c~3JPp>wv_UgVi0&f(TECO|Z^iCxy$}MLnSAhC3@fulV z8M-by#W&bx+PP%Y>&>gZ-}Zj(_ZIY}H`OUZfA6pVl}jVP-#fg(<&F#`WEpLwC$LTK zLW4Fv6n43Qk0=9Ct88`s7qZlK6D)&eP{sL2~i7!GaYoumt8XnUdhLGIwAkD zN+z!{PN7oEM@Jg`|Dst-QAHEq-$_<Bb;oOFSxU)h&YW z9nhLEw1}Pybq#9e;+9N#Zbia~OH&~;BcF^*ie>SyGw0`(a{Jwj{*jTony?xsR;2!I zxX*#t9HM;62N^hY1sAY*n^)I-T3fOCS3ge_f9=21E9EVGNTGbQ)IplKYjflmEZLuk zHgX8bpVTgC>XD6xcyH*j>4-eHB?;n+)6nq2pU+-`U1>MVZpw$BjFY`x#PjHz$W;d5_KoPY;zZGWI#fka0v!w zX@n_+frQNW@8m0b)xkkj0NUd*u!@72=}`;lj>M?wY{lKeHT_-4eO0J7E1O+mmtM37lg<`-`9Lo0xe^n*#Z> z@&iehKB^rJ7{UMmwNs&-;T<82UenW@w~>HNP>#LGt5{#AVI3$AF@+z`PZkA6K zP3Z`cUtGT}d9_>oBH5o;6jvYS%x9;b^}+#LPdbNu2C7@XfFB2@(?7T*Sv2(B)N+P1P*6~dx6}E+ z1FANY;^HfD(VZ?&fU;#p@Glch`~PY6ISkmL`U^fl3SLaAszjksS3_VwnMUqw3cOwcU3na&8pe#*=x-RP7>_V*lYeXE5 z&#|{*mm!S#si%N#4H(yd+^Szn#rlhQZq??3MUzZO@KQZ3*1aDBu}S>SGhmXPNRNn2 zbrd7sbpvIB8*1}v^FboXr`MZTgDOH#O@`Io;AwG7dU0jE28$XA7EM09+Pu(6sZLNk zCEV5C&fqpi+%MXFd9`_g4AO+LKZywFIpY4zYS zI25K=Dy-gq2G!mgo$C#6b2R$%YV$!N$*0$wRv!q?4p*->ths(4#Y|5tJY0TlUT7p) zH2U*u^FaItV-=RUY@AcJM%ATZJG~P>Jfv_Le?ChlpI&WVXe3!Q`tvDkS9dPY?%pu2 zDz){#f0K$t~5g%DsSDq`Y8! zVXMiHE`wvb^bUBH0s-S&Kp_9j@pK{yA^p&$q8j;FVj5Tv7n@2l+!D20khe3tto!bJ zOU-KZoy5$U3zd?SRRI$7LFf)*Pp88eH^d<|4LGr5HMoOe@u)2s48dYitQ{X-h8FzokO8U znU1j-LOI+zS=N%E+B1PRF&sbRfVt2Z|IA`caXOp@SR(0Gyw2u~vbSqHz<5>zOLE12 z2bpX=7D=o1`CD<=(%QM=^reFrIb~~qcsTYity_QPGM7Rb;^zBjQ!NhX$)z_c#IMTM zF{xlbuXQ>_W@R8QLT%8Sq*di;#CE}@UD}(o;`clBJvaB~Eb{#97d;*&^NL}Uo)Wq9 zH($XcH~?AE`{&`);wO^${VRa%w#d5Y|M3;eSz1pG0|K_>#u1ygku`f%9S~vZ`aeZ2lC+{#04|rrF7emUI3l;%C%vpy02TRPm ziT)zXm^j)RmLt+vbV|0*&^hoh#n{~Fp<$(Y%NUV>Vyyc%U@64V$5pWr#fAx*kKWPy z+xoQd**0Y6w-t}|plj_IG*F~itfDidBqG3XAc;;WbMiR>V4|DSGW6IwOH*{|;7_LC zZT8}jcvl6_xhIYwVf-Rx1ISyW4Ez1(*8)>P*4+TTPA#Z~0_!ldc}OZ`;q;`sg!3*U zEKFIe8yrFq9q};8hq+uE$v@&jw@}@u6ZfQGu)m2`&JP>?Lu_?^!ly|3d8mWqkwphA zPvb(CpS|b!o+Tsg1+dbgY~a^Mg^CWRpw|Ao7m4Ab47>Ij-xR2ccT%se4&+O*cCGML zD7c>Gn?;M%SkNi0_9v{i+Qw4TQ75@fV`w>#3DcM+43f;t6A_Qc^LN* z8VR1gZRY^wmD+CK2?=?Lx2k<#hJ7mB{UeHDn})QNadVYYLoC8^?UmLhh^SV!S>B_W z>Mt%1#007pbF0@cE~bQru7ZQ451AQ%==oGEEx!93>|DiIAfiH-eJ?5}Js~`C{d-x6 z38=QVszKipK1X!u`$9sqwM1Dch5SdF|7Po8(&m|piAZ0washT?Wd!f>+B?!0K9qEA z{XSp8@jT<5hu)Di`jhY2%i<~hqQw`)c?r>Pp%QLfs*~>6lpgSPfCnjrE2_>%BtK|` zYAj(>1B|D;W>VKb%yj__QmR8JLvhl!f1@L@i7f87!fQT>&Ho5( zDXIsKLxh?y&x-K0f7RS*{x0L5eku37MdW^)b@QaG5zq!nJ!dpWrvhTV#RuBgJ!4h# zLknb+wDx}=8$9^#G(~x8ASXRLf3V6^c%p^kk+Qp?``+2xin|Git0~cq1UWkewJ%0~ zfX}F^-WKc#-V&dangNa=p9UH0_W+v=Y5k(d=pJwHuf2|jTXBmJT0R{AR3-84k|}WK zD1NN&LER$5@Ir{m6DUj>!nTK*qPu zbTueX7BDCfoMjQBDJqQ=GPP+vu9Nu?+D0TN zEGYdlEiibAOH8XUm&TGhI-Q32z+WCfr=Tqg=IwO zB6{Yr7O{lNCc>91jM{&+iH)Icp5Lx<-G-;0*MxQRyv+X6UEw_u1R2_Ju3sDxSVxki z#@+zDtn8@u7*krRRk^2WUmjsndvJv+!_`^urUgt`gMU zy%iAPu8~A>FsSHk>$MuPT@*%FPt!%beN`lQ29awQBbYX|08J&V*+ZJdV4>V2-Ij8pRZPt_iz+zlO#?zs1S^Itq<-G7dQ?i_p{{U=)B4n^-Z0Cl7G zx!3L8Wv^8Ny;0F|cdE5F@T8ZIcL%{I|lx2^t1Ar&3N} z5CPPkIFwMN$5w_Adb8=V_*32VJq*yXw)b9q`~WdePfxn8g-BD)AT+c`bBqVytECt= zvreEhC?@sz5dtE!RY^fe26BMqn(B8wmQhQ zECN=}%{x%~o)(hBx$&xzXR^0?idi{csbmbscJgN(c)xbO*COh#*Y{)OnESOOPXp9W zhb!k&?M4o2!Gig8B?K79md<|0*Xyg>_;x^>UWMNoQWC`EyOX|_hu8T*g-y*Vi+4cO zf()uy+y@E`4x!#C#SDmUR@5GT9A${QZ9@Rlhw;uL6{r&^(-0W5gcWg=q-J?x4VaPTBf!{(%C?FfnKc zP_>Jq2P%sANkXZ;gMk?oN1Sg*1I^Q?^hTGG@A}09>stReiJn2C|}f=z(gQP0^E5@wnkO)MkK# zXJ%U9d=_TDAkQ5+2F>4X*Dw5H^5{mEq;GQuF)VF&yB-i~ZruV=LSnME5D)+n@nmJ4 zkeC5!V!BQh+W5mL|eN@X~xa&@4aW%vj=eo%}%J?`TFHASM-&Lm> zSkU<0ixV&7b6hxw&*H$`c(f5eo2eIs6d1^pWsee?>h{ZG4>-+stG?==vs>!){l89M z?Oyl??plhU*foePzv6qZ;Ir}S_EWz@O=er2#@1BRbWo}{`F3chg z@R8jFw^=(v+6`SMRBVA)5T`keR#BvaHz92c!I-&1v>u=rcfD#!@lM9T#mN)TqZTy~ z7wS;X3-XCV{$+v(il0ph-Ee|S2riWbIK$~EB`Xn7Iscxr_=j$NH1K#vb$MOYq#Di@ z3+&r>VG185v`smhizBB9-{E83S>rHm&WW(orva9(&1QnbntPADz$bD>S-=74i3Y5= zwxeR#b}#)FBOrpgW`c(LR;UU`zZ6^oE zoCij)+%)Q95UbCucWFZ@dOxUUp8+NjAS&}s(+GFnelNY{mAckP6HcV0VkU$LTjeAB zLQp}VppNCw3$VvP1ZYqM7g+wwOyr}R%WCa+$VAyh)F3pVK<@{D>mOj z$av1(jdL6JVSuR(6I|44wN&(9N*C|MW`ra`hN^)}251ZvP3ypo6AwYl4%1Z1RNvaR z-BXfU@5{w)5OF?o5fsqjVl`*+_x>jQ#e(0j8slJS)eoF4KPA~@$HMpMpQF>{285I6 z>K#GB4!y&=3RoplMiJ;)M6w3=0Ef3NUfq6T2e>)aV5h ztrZtCiqI_eBk(AoaR~q(nEdLI89EWem56UVYN@|7&>N(zl`=FI*m7-_F1{AgDgG|E zuceU;rzHRbC~FI3kCLZ zyhH&v6Z^y9giA}hz|D0`f*;B(G%6g)!3iG?10KR*Frs5fETz|bpjx5|9(XK^eIN1D zp6+5S>wVHjM_EBo4wI*NQTqeu6eI-QM?p}y$Fjz8QL%0vj)1fYn-5d8rWKgrg8FrH z_X@ODxTYLR3sG5tP3g$9{~rW%64AB}nIAm(uwB!0zn$x7*Pn0%NR{zWV_`RvhioW;w+ zNH`)b6>|(*;KtAb(aSK9x$x`Gf=#_H+S*9U*1P7@h2u}9rLC10iD#SX>W*;&&w|P; z>`KKSQR@hV01UQ>r%BjO$stwCXQq^74?orY5uxH>w&S;2nX+kImPCG)&CKC61P<^ZI=^C54s zi%JPZ6dy0)nE+Zq7|s4rN`9v#RXRwDCMsvi9k~8WPmfF|ekRtm(Hk}(hx|dE+bQy#MYkM!cTR%YmX=(X%itI5q@I*#Lb`4`L4(tr~B+eGp1gjPV zzK@pr(zW0fVhfW}Ll`nW(M=$CK6g!auU8-&Mv*IOzU769X517CosNQ=;@5SohH3HD zdv;2mYCdK)X|_!)r!WSeBcTN;P^3nv)b!L-I~PL4yCj?6ul1eZXe{yNzD6%^OWMDo zhTq&(5m5{)G39g7YCy-rmqRCEh}?50>a9I{`6 zL40C!0+)1PTGn}WdR9w?4!qo(Z0qOs5Qzv;40=Qp0C91^mpqwj<8$VMrKV08E140m zxQm-nsuqbPAuhyNIRpH%N{VukZe`qe47Sftf<(#Ax6#3#ps!#S*@%0yTW93y3)$~3 zZVH1n1t=~)+vn(Bkzc6>g#pFoGBDD<4`wgvW<4#LPoUDY?DS2N1x*!X#ZOR`T+SYF z@nK_qz&6S_ogNSJ$xNd5dGe^M;;5XW^&$WWdo)Oyns?K@jBWt93$f{?c`7)QAPcZx znV&tBa7f>|sxJ|2;?O78R$DWw|}5s9jvOBT{_onfwD)!QFuZc77*vVrk)mzz^B%R&y=b9YycYQ1;^2A z*~#QAtd7BlSi0HQeNDtT4O+#s9U(<_Cj7&uYj!Y<^^Z?W?@IP)khp#-8K58d;(Z&Cj$6yjO5W-gFc1SU~>Ta#!U zY(OuaVP6h%tXg6HceQnsy&5!sxX}#Sh3;56JV^ePc>=LeOx@@~$JAUuj1@ajTr7IVz!AT7 zXV{Zb%I1)+Bztgzgy;7M3pFwDJs681-YkOyK__5fiZhfZ+0Fytl<~;ru3sqI_dN)u z;jDc&09g~jjpyn3$zkT(sC$PcEL-T5NG9fKRPkw=H`*!6s+JcT?|q09!*z0G-j7aU zFp#pBV7GZQ!$4{3t9iI25x<)~aYDSoVjRvGFlVYk0XJ3sI}E*4{m|Ku^$OwaSgJ~yF z5D0i!36A8eviq9`M@PwhsL|P4l$r^2rsDG!o}VY$aQOb-(HvR@FH1$u*mKQqenjw> zG}E=i>z>=TV{{f@&8LKAxu6oXsbYY#>Ra^MTR0I29J@uQg#|)PtwxLO2vp+1-`4*e zNwYZ~Ga<+?_VCPdF$7|75Hd+?RXAwPZC<{0x1d%2OjuovjOMdd!pU}|%t_r2GTf?}Edy|;BQ!{{ zmCphw={!MAXxi$kE{Lzms&ebkfeZ&hRKEP1dBjBnW_pI(eNrH;aCyzcQHQV9haj?5 zDs#on_1Il}&>RAxy$70^&yYf}yM-0~<%v}U#}n8CHnP`LnJ_W9b%q}N_0=OiRlfHY zyC;>vTr(oBP8QbFx5hQ3im=S0&*VGhk>2Pix1X9r%+qPG>7=&ICAOHV;bTF~gW2?1s-yDkKfCio7SAhA zm}BOtNl1Rv>oVT1;Ij=ThGcr*o*~K}On_e}t~Y#Vug`E*F}R55E+heBgd`U)f@gQ^ zq(_6x#V_2!yVF@<#^X(W@+hmQE^y)v--dhs8HV!xeTY$t-)5}wRhX(*HZL-EU7dAW zI6m{~d&_iP$%0GSB~F>bqwP3H+VoL!*bAF0jNywHk|8Vb#;ivN1PIxNZVV?UhQqj< z5D?&b`Ja7PM-k^N`j)&P>(+ZdQnNUQ9~)~(3!}iZfnGVD1lA2)#Ka0r!-6!|XkrnP zYa3^<*756oVCYTEuj3qN7C>?t>im0f@u`kFTVCQXF)A{$1f<;FDxn&RCX1+J@R_AO zuKSf9M+G1g?91YPW|651qbc~WKve1;ue<$oODVMx>&*v5;zE2oQx>DFi?p5D7DS1d zhN1x*rG>jonSb^*qUv(6eRF>iiMLzl?%Y&?OvU!gv?Bej+__(Y1dq+8`&xHB-#??7 zc|s6rud)_>WcT)uRqDkW*#kk|o4>3#D4n-p=T%4%i|j2nIJ>Z~lva2g-J*KeBMh>s z(qWPDvu#9iEXQ^}L5PO=VVE$dzcMSFNfQQqpCrTU({a8XNE-4r1jdKq1m45a;lRReQ-#TF|zFq)k#%)ro>jS}PV3cq6D z--ns-4M|mDhru#hv8v0PcSlKUUmF~=S7y?zLuD4g?!Notm5t;C(vZaX+RWpqj?wjW z=DQPz1|kR^e!a`C^96N~!TL{dEI!I-GC)a({SQ~rQGf0&P7k7;P3JbD$#H3CF2Bv6>LiaM9uJn>@3{}~UIy8~KQLDJ_ckulTo+)fKr zH0${WF);vCS!)(K8g(04c%}tpHj9&N z&<+-ic3G46GrfJYUgG=f22&{g+TRJ-?@X@hL2cBUFN8Nhj_~RMOs|IdO z@x(-IFiHl=@wzHo3L-5fUi$uUs5^er(JB<@d;T~C4`tLjbd|{iME~H|c%MIlT8JY( zE8)+(M4`xE?ArxVwYJf&#oCA;T2XHU#7zB2Ctv3u?Q-z3&~*;cAVB260gpIJGXf}4IST^Edczl6koewXuA9vN zVd&e)1$HjI;W+0X=dSF)T4=UcQOp}~bt2=;Xh6+wcq);YC#0 z;|Gr#Rx3y5h~Uv#*PpPpK%MiULyrq2vD9xxkgNQ zRvSsx$g<;w9XeIxEcZ#SuYaX9Mvum@e5|{?O_kY&@B7Jt3OBaC_{{$R0NKVHIYJg3 zE0DpyN!KXiYtOr?LpU~ly7PSVBjLnQ3H~FVCGI|`t4KlNeyF)i80)m2bxhz3aGrNo z0ugTP_FYsgh)P+uy{}7r?R4|(8mn+1wRq1-`|W+@@F&P1td?aq>flx|VIbpYTsEC@ zU95XN=*+r$sT(y;-z`8V_<%H7u2uyOxyf$1L^`>WOmdHP8m;4=mSwZ{MO3THPJ|9u z@gH$UJ0R_sZfr)vWiZe!5XH%DjAjrlPLrFq->`gKLWho-0m$Hy!Z}P#<+5%M0OJ;s z?S_apkC&wi0caR-TVY|i8)+~ki-aMWnY6g*E#$AiSsY>Lk{9pCO{Q*+%_)$%EaxUy z9oT3v7XUHY+J;d>`4V09z?sr??86f7TL%eaZytO+a?JV-hY08S?;ofSRLrNcRxfqQ z*s9whM07)uUyq@$!prCYsR-uCy{oR2tccpPxMAab=T`xKEQ_|!FV~xa04!~Bx$-Gg z4#(+X_~0&v?%04)CBk{3!9t6=nN&oj=Abs6k0%F;S^Nik94kukB=i50Cp5dTVsiIl zXE3VK6`{*{ec!}%hyZG=Ty->D-+3hoPp5onTrjmLdu_<=pFSU!fZ;U8w3u^%&3SwG zz5`wEEcODzo6FH2$fi_E!;0qPUy$kh15}i-Nfn4-B7g=tDQ3QKx2**!7I!fH;yEg< zE~m1P^F-VOnmOcghzUuqg9e5F$y(rb3UWswsGQM#lRoO7lX{72h&7UKDBiBJ`IPMipv6f< z1H!}1N~Ri>z>v$p^rr?rHiL1`xQv3CpIyjhX;5LW*YMXWKA2%wnD_$=p~Dsl!lz}8 z%WWa#0^ET+_vD(HAIr8<+ri<1wGi(Jb)R07Sm~}L;UA4)5hwe`4g0hX0u_i>)WsVw z#K;oS@^&9VoO)#;%m*hCM7H_Xl zbzr#JQ{LW(t8QCtFQ?HM0$Hxz37L0E`AA=zF@M9X)!ryE=uC84XO8vhBVp6l4`o$;I0#Rw z(rLWCHThTTZdV&(c?&OO9P|AN+-UStJ{>-MgO`JWi~t1sM3>zZq=LcpJ=EGAo=Q60 z;`-&Qqs8Mx7k1z_teKu$2cTAMRwaAO;3*pwZ?4I%E4b| z$%WoIPe%!wt~iqrrDLYAK$U0!Gjk#tHIota_2t;9>1YOUY}~3_?t9ifDAosUA_J@m zY?jt6srB9@xTH4v{Wqpki-5)$^4pnP*peh&p5oI2Wn8MN%$u$n?mNwC%Z>Vt30C`= zIf~KvyB}B6#nKxgD@HOK$l;BTg}g@4fbc0<8WbTQdD{$dJ%$9X>j?Pbc7ip&RWjFU<>keNk2Bzc9+l zsc0}Mx<|a*v}?=%5r(Tibo?Ta8f*d$B^;?3|3F*N)}6FcD9p9O9da%c0H5A7h!tb0 zS0)6No&Va8|FXTvT8Wh<^cUv*M3_Bt;If573f#iWXf90;$1%px#eBS0{uK0|CKmG! zQ(^!>(5DwIQGGh|`fskg4M@)6_0|9@UPpIMvqTIJxNNk^?w50jzl`bDmY*@TKbE@C5<%01zK={UOsx1c}8Ee6E36G zW>S+m{h9Ra*KaWqQ&yqs@t^)day*ad$ZeYEon%3_^=1EJc0V1UT6`nY6xn$_;sDLN z5d75Ij7Qkr=m;mCNH!C^By8e7qe<5iKb_c0(LFRhR6)Y#(%T3tp*Io5V!u@q8RH)M)pykwXN5Y2V@trqC(X^cm0E(U1GYtjKvp9Gb6BW3B}%2_b3zWXYo`|on$XtYiMBhghRfA3*ev;VO;m9r)CkOGQb{T8rAmOyppb-0LbMJGYB z1X6Br<(~1=-T8UR$18in%nnjjuBo^&RelZB&W1p0aoCN4xQ{cIBDeU9vzs3hdwc8K zG~>V}&m*9=AqK~5^5Q7ZWV{@A{uKN?J-^R%j~>=H*4eQQ(S4uKI%-`h6@=CtMy(SP zm0*CR3fjfFOV0lLv0bipS=l83>^7 zt!PX|ns=o+Jl@(IcOFtRmXVdPS537Pu=t}<)l{Ps?EKF=%WcMRSGe+exP)-?jA`Xl(j(WAI5@A3m^rR(^U5?5#I7C3Z0y#_i zaLl?+Bzr4OaKKz3Q+0K~L`$}7wDdGHnwi8L;OaY@~EAy zf;U)j{dK|CtOh%k&irjJ-^=xHjRv24cImWbxSi6o5qD=R`VK~TpQv%Qcn?~;u^8m2 z$S+LkUmP7nwKfO%UFFAy`TSAle<}~`Hc!JTd>CW#F_(F3BF^ljIcwNm86sjrkc5xK6e@ibM8>g7b<+xu4qfQT;eE4r8r3 zzZ-^*`y7%mH|nYAgwSDux6omLlvHf0+$$}HCCxt7R8RDSxI005yQ?3N(jgDsGx&wE zN7=f?m8lx7v&w8+(q&q9IgN4W6kxyotqkro%Wm_arsCx)`A&_iA%o*V5fH%H_sT=9 zbxOeFtG*=yAPs%BaqEPnBzV_~p8THeDL$-@lacBm2u5vzaxF=2hDaf4ktcAm=E#43 z@uF&EiKIAM&JIudjniE$f-mN$KeY~KunnhaXKKgYYUD9cAB)>xPyJ_Zs#pvnB%)!J z$VIN!fZwWU7&Fq)saj=ckI0vpygIEf+e2DP&8ErlMTlT?{9e?D*%P|IaI^$GGf?#~ z$yGgX_x0@^fTrBSIQZF7(>~rlqUNH{9R?LZbfn?n@5)z|Q%)P5$<_xD4!0;haGPN4L?A}08+*`d{O0z0OP+2YJ#~`+-6#-hlBlbx(KT~ zlRjXr765$s&jyl<*36zoN`Q#YYQ#H?Y!ivHI`2^&NTlo$99Zq5pGH)Mvb_v`RYRQ| zi@k3KX>^x(hqeHS*+DKQ%BUpT39jP8s&?0=Berh$j%@XTkip=poTNnKgxKf`WRCN| z=LsG2gTyYbSmEE@4D3r*hy6jzA8oVp)Mz6k_7C)pSt;B7iv!Mmvd0nPx5D9Pse17O z-J_@{+PQV9=}*p6Hp`HFT)LK`71ozvH#$&toqX4Z15U{oR-%cHm| zr9U;=qJq#m=83>K6TIaG6!l(MMN-w5P=&_zIwXzJ&H}~}ip*%RwaiS5=%;dgS&F$` zQ>_IOrYmU)0}K9%{)4g$&6fYhzaD54oXJpUy{RJ%HXyL&)ieS1eK#gCbru8hZ4f}< z;bp}j$dYev6N_Q|34G`%$YM5$8Py|xzk9w2pp9%qn&;1Io#@1E{W@?7vczFux<}*; zU7Cl^2>#n(QeJMpNLiOIln~(A8W2(hB;2ro>>BMYLV?fUFcd$%k2$3Jmj8qQemr|S z)~MHWUju+JU1WFT=W8OQcc0c8BJw&feYuMe5jNR+W zXva4DaC;tZ-y{-tW%+}Ia1|*nh%;iV66!rYR+dRe|EV)+`e(CB<>9mA|7ukn2f%$% zMtS(5NT>>YwiJT}Gz4x_X5^fyBMi{m=1!^{r3@eVy~g1LP4=iGFDWh5mD=8I-yw;Liu`LQQWbK#q0P|yf09P zc*@Lo^O)pw3c>UNs;@h+callNwRg1&EF4ksMliEwL3c|N$JhUm zTIq-;^XZ|e7yLja4^67>A=VcAkcC9ox8a|v1(Bq6DE;MK+SS2e-B-K5lu;ZR8%8)$ zxWtEo-G8zf(ZF;)oxp^(-8PzfUQK>I*sNAVwGl#1o2(X#Ke{CY&U<-X6*|8vac8+` zZutMN___QMcfjp$l^JcH1La0ZvSt?rExIs%u}mBl*=2E93~<)vR&0Ow)3O6rJ55k= zs<`NpGm6yQZT{6>)%!BgQ5-`@Q5T~>#fJGM zf!MxEL^^ZHB?d0t^u25H>Tu_HJD2wEEIlZSP?!@e0_|*P*<-(+UTj$*1l??Kg%6k* zcC9GYx~9Ud`hnbF*Y9sut6<)n!hxgNlAN@T86wI4yLYP1KXU& zayhGXzbQDPGdf8-{>sv=D0sGZ0?QE4PiXPk;iWZ>DR3rsY^>xt&&BE7!8NZ=(Jg}G zEu~vltG8;!yokf6A?zgyPG(3A0_~wCoJ_{0)WeV)Z9N(3T_fn>s|5p-m{55;=9Qfz zK0Oy!`>w0La%(bjOsrbX{vh70sO_rqz>hVCwmSXxa{K)^SZ`)b9TRu6rTExkZ>4`w z2j6n{@tSn1^!Oh-L5;MB%wkpOa>r-&{Sx1VF6*?gSgvy99-`yhOGClaRad2}ImPLz zGn^ZF?M)jk5kw}4mF7M!F;<9+6)`^tzvsMrryL;feEbvo0dl1onht1Om#-V{4#gcY? zP|dLSs63QcUDt@5C+4i)k@g&PU1&s1z`Spm(hOI*J#720ZyR>UL}l0Vzgt&`ef?~BeamL#3F^f1EKA%l3XonuRK zZ3!x>$Lso&heJ6ic}S^BA>SMuuEV@YIo-mPr}L%k6F@XO1qY}k+?jPH@Ib#@VZSyK2h$lHVI-qI%I!W|;{HJkU$`))k}vDbCGu zFonj){DJ}whI}hL;WMg&$}<%@EByb1HmCiVs=9KYzoYaZMcd|qG>xf|^mS*N0Lv&C zqZHStYa%AwIovU16qC{w^a9q{&WFm`tOYO617TV(Ff`S$pP8nM`E{F&!>3th#)MSf zBBKf^J^3r8voueggQ;?_>l1xS^HUb2?Z6Y`kJ~=E&6JIROZ^HlPM~#Qa@i?Fn0lqX zq;DI)Cw@Cw>UiU0-xw)#(glrl-$xl0JT%zt^bf+DsHrflibEj2qg@JQh^B!HSPsS1 zAH!28{rq2Gr~wc>f`7FApAc$fx_=coKE+gIe z)uFjX<>4S)Gu%c^DabLsRue|SSVpULuMXO3d^V_q)C5s&umDw{npg24ng<$~9^U5A zXs)^4b2;%tW37jBp$TJBQ<~==g5H5}qoo?VfejADC-tlTL7$yB#cZiM$zL5ysG#?S z2Zn<{nIunmS3T}O)duy$emry8@Gxn14zm59W!bkyksS`_NdCZmVPXfe@y0Fh56H?h z;_u6h5+)?YtAQY#I7{jaeg;YLrLT)Xo0Uqj-uf1nsuB}5+jR+PP0;K0Z)BXo2z4H~ z8Cjf0rnh82tYq@D0fZkRk75L5?|qtttf)O9NjY8(nbji?q5mzbv+CY(n9)+b38bO< zRg8Afx4tmcJ{F&iX6iw^@Z(OKR|};<6p=T$B0kX2LyS9*AS4jm6gnio1FF>QP* zv=Ae$c{ux^D+L5zl!-n(p2Z!G4?*<;UVKyn;g#krNo}x3!`pB|k$a#ds53wRVvK|sMe+W0SeGcjt@)XpW(VPv$k52A}9EJo|)gpBWEkDh9jQSf&HPux4b zd{rg<^G_m$>g8J|-0F!Msb&+=}SwlFb<_x(!Kr_6`hhe-{ScR08Rio#_SvKjV98j$l%t zdfNM~tD#%OZGV6eiTAl8YERfm`{BPl(SdL+l5I0ivix9gJpL)~47+*HzO z>aJBS5-O6@)Yu!qwuu`x|LX-<&plExqxlwBD5T1s$-2(70!ZrmUx1V7BW}~MrFrfm zNh<+Hfu<+sPMP>j!fA(xbFX8=7ZA!g*fwR0_U_g5e_(jGHmtK_t5x0zb^&~~e?yI$ zG~3!4dX0Q7Z=3*lc>0*8iAHAlcYBK_>8@ie>OKr_;SHAn0he|^PO-erN(^lix*_wL za)Lf-JhP=*miaQo5I~PX=TrI>wo*F~W=v>TQPwZcf8QT-Pmll6__5z|{^(WwV^Orc zpIL|Rv+%8YIGj7fq-F-xuA|oW^sDr_a{hN*6_*o1XGqWnGEvR z*kF?fLk-&6p^}=#2ueYbm@LkIOk6ELo7y*4bdtfK|9s^%e6u4qKlb>(R&L65qj$tV zDtuxvY>(2Nm8O!tTQD#*MK3$`_lmyG;Q{9;FiOe_?1#7bDj1DD>77<*@nc7T2=$Sz zp!4Ct8Cl7@(}<<3;$bg-0uqMBGB6!{j&Z903(jDJiWHESnMx>wgcNDz_SJm*zM(Fw z6jX4djmXGLcAyN~f*}I{nOcA)GA?%++)lg4#U~r7A=0h{D#J4TDWIP>PG>HAju>Y; z_^?q$k+H0i_J|0n?yTq}d{8g0om#fE>w~a@K+mMZ+!X3Xq}MZV!^5f3cm!L(3QBM1 zcq*cmcKe_{$n{LzSfoF)w)#Hp@RWN7W5O5pGlX`jKP@w5L2ojQGryt)e%XqBP2|ga z*GhD?(3HpP`>Vg~c9qFVM(7bFfbiZ5737|>h~EQuL%Qx5H~#Af&6DP<3#t)|BY=#D z+Ue^!j&f{a)NPNaal!kjtwBJ+i#e=j3b_;@hlyScC_2YnUB-tw$YWl;CVWIACw*G$ zk+WlLNX?TI@MzT}o>Odw9H@riS6LrXG&CQ_C`kA;bN+4FPyTgv14`>q3E<8EXoY zEi}sS7oHGpW!(eTrgpy=#Igk~BWc)Xe4lRsL+8gcGwP5U^I|J*GUg^Wa&Splu*(Dl zSM2e0D`^7&At5Yt4#{C2-{skYb(N7jeww-sg5*sJgJ~5mB!R1bjN;r;U(rGmjCzF6 zHiIyX$b}Im4Y=BZ`eJ?Jn6Wi6sn_S_*aQRCm;jC66TU)DW!*Bn#x+vj)=&kcX_iH` z{fHPtsSp1)yjw2q(oHrdX9L>eE+2Z~ee8V6xT44D7MY+(egUt=BqqtQz~CE}rkY}} z*w||0|abtjmQfBxv)+#rbcy+S-{@CAaeZJ3YiI~#2@%`Z?LTl&B@VGF5Rgl;rMDpX*2{CutM zpI;nq=g5`fnFtz^#Nup;4sB2We*gqecE~56U3c_*7%;gG zy3R(a(`J|P@#8h_=+tf|XTRD2OPhMbv3L;(?nZG{G9Jt79F`CPN%n6*Gh9e=9opYt zc=8Cx{B0>a5}+QnfuJw1z5KqXW#m z8-t>>a56xJ{W{wkk;qNI8rn_eNA9z*k_Bei^Aus7S0QcCdwz9;vnK^`zs$cKdQ&+S z;=mWh!r^|6WgY&cq*e-1Kh~KWrp-WWTbwUox4VXI;C>F6&WIynk&_!R#3D=ZsXA|) z1M!?S{v+>fo&$!iOeR@S4k<)Zhdu4q%~ay=nX=@)u;$v$dY?@8FN0cXDDpD-U^YV``5Sg!>YyxyXlr8xzbSN1Tl73Ya41W*Q^MW` z_MT}S9C#F>f{~~a`H7hzU2@|9Q=d7=AfE#k*8$WSx=V=+-ib0wdV!P3YJRu}^>?vX z;vDAyc$_zIq8y{eaqOsHFh%<2{(O6bmMu4hb;OW++$T97+Q+wDI^8KjX$+;u2*)iC zR^3WS{z2Y(+|a74T?)7DgVM?LYYlK}A5Ixa>wfOa;A7aLco6^;h3Y|nAA1qVm$`su z?FC>W?~el-Y-1MaIE=kYg8oVI??^0K_=A9B9;sNwitYcJs~;b*uuQE1-EET&cvh%q z0&BuYz>uT!o#kA2>UJK%8)Kg|)UVSfLFULqf#Q#-+XGpL)zZ}EN?qE@Gr9etZZ~$+ z$aLG}*G_&q4eMKv*S!|L8wN}r^0g^=Y^|t9{d?AWel;0kjMd|P*ZaVOx7^;jNT8rW z)us0Z`9%w`QENKYHJ0!^ZR#5Rj~6Sk+4uazEApfSv>;Yna0&Yov~Qx&#&E4m;)D=2 zwQv-UpGQxlsO8sm=D96^-q>%Ya6mokn9q{g8fdHTu#AQkr@q@;8l??nDskyNEOLQi z$1hD$$rDykxhaRVN~6W(%3{b4?|xF+mGJP~5FIlaAVoD4$!$lbB^}lPqvvGwbh+)o zR9q#^=B)_k>|`LvyWmyqxb;#A&_)(wU}z{~6Qbl{FMm!d?oapSa>10AYZr~~*m<$M zDPxSzkUhvOMDvS9?S`=Mh#rRJk}D-CP^oh3n9e7aC_#P}!Jp3ur^pLOa4iF`L+m+8 ztI{l%KeN6g*pXM4G~8b$(GAvp%*~Lm7;)|18C(ki5P*0R4FNHv3|ZP&-NyW!BtW*o zY;EYf(!7>;g{tfjYQ&pqQw|7xc!EdGP;DZYB=})~Ee=stc(Zen%P5wqO;~ z#)*UtXg-zyW8B;#;X(2uK*tm_4Yo<*=Tg*8-?crIeV0?Ki+&*4qK8m8lo(~@gMKhM zq%@^C5K&)PGdCuviDCn0KbyezgZ@8O?9kYS=g6=p>P2C+Oflr6e!KL4%5m63?5Z%z z`lJD59CAN=BAHP^!i3eA+oj{Y|6Kj+2mJ`MI7+`v3zB^l^Z*po7J97G`M+?YyX(F+ z|8%WVn{J+x2_vE$K`HN!!o8CBZqsWmoC9FyL%CtiXY#lA4g@#bLc_7;Q@4f(34MS8 zvY;(4L12e#7ob({+3sR9TNf4d5kRZzL^Xr&2whaiS#q-NsbTI=54JG2L4OQ4=sE$vt{hBiIn8_C3dDhNWf4LAuZA%@BrkTVwn{(S&A z<6rFLBvO|IN#-K^nN1mkV-7Rh8gvF@Ljw)UKU3Je&dyth7wCNGJ zRg4zA8DdH+;+oMHzz({7#z7ZO&~9><)O1yhr7sn_MEs10cgzN+_P0|bx|t5Z+E$%r zHM%d`B0OGB6KX!Tm1_rUkk`}Fbi|{~zf>7krFlFtSbkHU-v=w(J!;HHY&rkL0z66F zL9>)oBavsY7fwlmTMO4A$0B9%K+1!qJNxD}K6qHEz0L)Q8b7|Q(qvX2h41@K8l)!{ zKfJcMRcz$1ZNv~9V4ngg^^j*~M=RIUw7ztB&LOT5XWW<&ku^>g1XZzxbQTQnlo#I_XBE=!;YB8c%M1@W_H#Q%|)qpTXwc2TcDbS15y2d=1# z?&R@T4>)#xbYUjxH3MUxV&da0M= zE;yLE6Dm1K&M6SSOk6Y(HA%P?n>QRLCzwnxeiyrwNW^+>LlH8_Vi@QJi(OXPpPBS~ zri&c$84PZnWpLcasMR9HbFdGwo7y?AoSd-~S;`YKwmDMoSpDW&D;qjpXz~gjj9MkU zM8I}|?E&|U>5=PtvRfHL9;{Hk^`2dUjyS28Dr2XAq_1!a&G|Z7=S2~tP!>-YM5N-7 zusC`KaejVz5`qFbNsRG2iE=t}7ShPxGO(y?QdDCp(>X9!Q^rA*3VcLX6N53Mrq73h z)FiuegdS-J8(dpHsv(&lr<{c4DiZBr9^(HnWN4krn1yC~V((J z3_nij3*xQmEXFcCA!FCOqG2~=mGwY;idN?`00J(HC!31sV+oN_ zVjy*swG-rd;cG)ej57-mcr_JT!M7%6fsDGk753x2~E0I?MW}2MEI+50@fr0EW_M}=sK53o7r&yBZ4?E``7*ss6Y={_dWsK$Adly|t7fHm{LDL?xhR~h?a}8Dl)Anx# zdj-0`83hKNHiZ{`(FiaOeFvtJd6I>p z@EcY_IEkA-G(@6&I||~aKqh~4{giP0M(<#5CE_}5t*?gUUWx?%-VDr?#It{ z|AndzwjMH^sCRdo;CNqZSfEmq`CavO&?NNb+y4uwmo&T1)v06hJ?Y_U zt}=5j_F3-f5Rd80olD=;n7!Jv3_nyZKe^Pv{5w%XMhnWLDaQd^B`2J{E)9DCM`Ecd +Check [your TuxCare Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted) for the specific artifacts you need. If a BOM (Bill of Materials) or a parent POM is available, it’s recommended to use it to manage versions: + +* Example of **BOM (Bill of Materials)** usage: + + + +* Example of **parent POM** usage: + +* If no BOM or parent POM is provided, **update dependency versions directly** using the latest `.tuxcare` patches for your dependency versions. + + ### Step 5: Verify and Build @@ -189,4 +199,39 @@ const gradledeps = `dependencies { implementation "org.apache.cxf:cxf-core:3.5.9.tuxcare.1" }` + +const mavendeps2 = +` + + + org.apache.cxf + cxf-bom + 3.5.9.tuxcare.1 + pom + import + + + + + + + org.apache.cxf + cxf-core + +` + +const gradledeps2 = +`plugins { + id 'java' +} + +dependencyManagement { + imports { + mavenBom 'org.apache.cxf:cxf-bom:3.5.9.tuxcare.1' + } +} + +dependencies { + implementation "org.apache.cxf:cxf-core" +}` From f696b6bfa36b816da3a99d304dbb179e073ffec9 Mon Sep 17 00:00:00 2001 From: Sofia Boldyreva Date: Fri, 17 Oct 2025 17:00:46 +0200 Subject: [PATCH 5/7] update dependencies --- .../apache-hadoop/README.md | 15 +++++- .../apache-struts/README.md | 49 +++++++++++++++++-- 2 files changed, 58 insertions(+), 6 deletions(-) diff --git a/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md b/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md index fbe45e1d..36a674cc 100644 --- a/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md +++ b/docs/els-for-runtimes-and-libraries/apache-hadoop/README.md @@ -150,11 +150,22 @@ const gradlerepo = }` const mavendeps = -` +` + + + org.apache.hadoop + hadoop-project + 2.7.3.tuxcare.1 + pom + import + + + + + org.apache.hadoop hadoop-common - 2.7.1.tuxcare.1 ` diff --git a/docs/els-for-runtimes-and-libraries/apache-struts/README.md b/docs/els-for-runtimes-and-libraries/apache-struts/README.md index 9079d52c..546d8e84 100644 --- a/docs/els-for-runtimes-and-libraries/apache-struts/README.md +++ b/docs/els-for-runtimes-and-libraries/apache-struts/README.md @@ -69,10 +69,27 @@ Replace the Apache Struts dependencies in your build file with the TuxCare-maint You can find a specific artifact version in your TuxCare account on [Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/) (anonymous access is restricted). - + + + + + + + ### Step 5: Verify and Build @@ -162,6 +179,30 @@ const gradledeps = `dependencies { implementation("org.apache.struts:struts-core:1.3.5-tuxcare.1") }` + +const mavendeps2 = +` + + org.apache.struts + struts2-bom + 2.5.33-tuxcare.1 + pom + import + + + + + + org.apache.struts + struts2-core + +` + +const gradledeps2 = +`dependencies { + implementation("org.apache.struts:struts2-core:2.5.33-tuxcare.1") +}` + From 2d32cad6f441ce4c415feddea392462b8a062c8f Mon Sep 17 00:00:00 2001 From: Sofia Boldyreva Date: Tue, 21 Oct 2025 12:05:30 +0200 Subject: [PATCH 6/7] updates --- docs/.vuepress/components/ELSTechnology.vue | 2 +- docs/els-for-runtimes-and-libraries/java-libraries/README.md | 2 -- 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/docs/.vuepress/components/ELSTechnology.vue b/docs/.vuepress/components/ELSTechnology.vue index 5e760874..3e47ba69 100644 --- a/docs/.vuepress/components/ELSTechnology.vue +++ b/docs/.vuepress/components/ELSTechnology.vue @@ -137,7 +137,7 @@ const techData = [ { name: "Apache Commons HttpClient", versions: "3.1", - link: "./java-librariest/", + link: "./java-libraries/", }, { name: "Apache CXF", diff --git a/docs/els-for-runtimes-and-libraries/java-libraries/README.md b/docs/els-for-runtimes-and-libraries/java-libraries/README.md index 3808e7e2..957cd2d3 100644 --- a/docs/els-for-runtimes-and-libraries/java-libraries/README.md +++ b/docs/els-for-runtimes-and-libraries/java-libraries/README.md @@ -102,8 +102,6 @@ Check [your TuxCare Nexus](https://nexus.repo.tuxcare.com/repository/els_spring/ { title: 'Gradle (build.gradle)', content: gradledeps2 } ]" /> -* Example of **parent POM** usage: - * If no BOM or parent POM is provided, **update dependency versions directly** using the latest `.tuxcare` patches for your dependency versions. -* If no BOM or parent POM is provided, **update dependency versions directly** using the latest `.tuxcare` patches for your dependency versions. +* If no BOM is provided, **update dependency versions directly** using the latest `.tuxcare` patches for your dependency versions.