ELSDOC-331, updated php, java and javascript libraries

docs/.vuepress/components/ELSTechnology.vue

@@ -275,6 +275,11 @@ const techData = [
         versions: "3.0.0",
         link: "./java-libraries/",
       },
+      {
+        name: "Elasticsearch",
+        versions: "7.16.3",
+        link: "./elasticsearch/",
+      },
       {
         name: "excel-streaming-reader",
         versions: "5.0.2",
@@ -320,6 +325,11 @@ const techData = [
         versions: "5.11.10.Final",
         link: "./hibernate/",
       },
+      {
+        name: "HPPC",
+        versions: "0.8.1",
+        link: "./java-libraries/",
+      },
       {
         name: "HtmlUnit",
         versions: "2.70.0",
@@ -597,7 +607,7 @@ const techData = [
       },
       {
         name: "Eclipse Jetty",
-        versions: "8.2.0.v20160908 | 9.2.16.v20160414 | 9.4.24.v20191120 | 9.4.48.v20220622 | 9.4.53.v20231009 | 9.4.57.v20241219 | 9.4.58.v20250814 | 9.4.59 | 9.4.60 | 10.0.26 | 10.0.27 | 10.0.28 | 11.0.19 | 11.0.26 | 11.0.27 | 11.0.28",
+        versions: "7.6.0.v20120127 | 8.2.0.v20160908 | 9.2.16.v20160414 | 9.4.24.v20191120 | 9.4.41.v20210516 | 9.4.48.v20220622 | 9.4.50.v20221201 | 9.4.53.v20231009 | 9.4.57.v20241219 | 9.4.58.v20250814 | 9.4.59 | 9.4.60 | 9.4.61 | 9.4.62 | 10.0.26 | 10.0.27 | 10.0.28 | 10.0.29 | 10.0.30 | 11.0.19 | 11.0.26 | 11.0.27 | 11.0.28 | 11.0.29 | 11.0.30",
         link: "./jetty/",
       },
       {
@@ -673,7 +683,7 @@ const techData = [
       },
       {
         name: "axios",
-        versions: "0.15.3 | 0.18.1 | 0.19.2 | 0.21.1 | 0.21.4 | 0.24.0 | 0.27.2 | 0.33.0",
+        versions: "0.15.3 | 0.18.1 | 0.19.2 | 0.21.1 | 0.21.4 | 0.24.0 | 0.26.1 | 0.27.2 | 0.33.0 | 1.6.2 | 1.6.8",
         link: "./javascript-libraries/",
       },
       {
@@ -1323,7 +1333,7 @@ const techData = [
       },
       {
         name: "pdfjs-dist",
-        versions: "2.16.105 | 3.11.174",
+        versions: "2.14.305 | 2.16.105 | 3.11.174",
         link: "./javascript-libraries/",
       },
       {
@@ -2131,12 +2141,17 @@ const techData = [
       {
         name: "Zend Framework 1",
         versions: "1.12.10",
-        link: "./zendframework-zf1/",
+        link: "./zendframework/",
+      },
+      {
+        name: "Zend Framework",
+        versions: "2.4.13",
+        link: "./zendframework/",
       },
       {
         name: "Zend HTTP",
         versions: "2.5.6",
-        link: "./zendframework-zend-http/",
+        link: "./zendframework/",
       },
     ],
   },

docs/.vuepress/config-client/sidebar.ts

@@ -170,6 +170,10 @@ export default {
                     path: '/els-for-libraries/apache-velocity-engine/',
                     icon: '/images/velocity-logo.webp',
                 },
+                {
+                    path: '/els-for-libraries/elasticsearch/',
+                    icon: '/images/TuxCare_color_icon.webp',
+                },
                 {
                     path: '/els-for-libraries/hibernate/',
                     icon: '/images/hibernate.webp',
@@ -345,11 +349,7 @@ export default {
                     icon: '/images/symfony-logo.webp',
                 },
                 {
-                    path: '/els-for-libraries/zendframework-zf1/',
-                    icon: '/images/zf1.webp',
-                },
-                {
-                    path: '/els-for-libraries/zendframework-zend-http/',
+                    path: '/els-for-libraries/zendframework/',
                     icon: '/images/zf1.webp',
                 },
                 {

docs/.vuepress/routes.json

@@ -221,5 +221,7 @@
     "/els-for-libraries/symfony-process/": "/els-for-libraries/symfony/",
     "/els-for-libraries/apache-lucene/": "/els-for-libraries/apache-lucene-and-solr/",
     "/els-for-libraries/grafana/": "/els-for-applications/grafana/",
-    "/els-for-libraries/loki/": "/els-for-applications/loki/"
+    "/els-for-libraries/loki/": "/els-for-applications/loki/",
+    "/els-for-libraries/zendframework-zf1/": "/els-for-libraries/zendframework/",
+    "/els-for-libraries/zendframework-zend-http/": "/els-for-libraries/zendframework/"
 }

docs/els-for-libraries/elasticsearch/README.md

@@ -0,0 +1,164 @@
+# Elasticsearch
+
+TuxCare's Endless Lifecycle Support (ELS) for Elasticsearch provides security patches and selected bug fixes that are integral to the stable operation of applications running on the Elasticsearch Java client libraries.
+
+## Supported Versions
+
+* Elasticsearch 7.16.3
+
+Other versions upon request.
+
+## Installation
+
+<ELSPrerequisites>
+
+* **Maven** or **Gradle** build tool installed
+* Nexus repository access credentials (username and password) — contact [sales@tuxcare.com](mailto:sales@tuxcare.com) 
+* To browse available artifacts, visit TuxCare [Nexus](https://nexus.repo.tuxcare.com/#browse/browse:els_java) and click Sign in in the top right corner. You may need to refresh the page after logging in.
+
+</ELSPrerequisites>
+
+<ELSSteps>
+
+1. **Navigate to the build tool directory**
+   * Windows
+   ```text
+   Maven: C:\Users\{username}\.m2
+   Gradle: C:\Users\{username}\.gradle
+   ```
+   * macOS
+   ```text
+   Maven: /Users/{username}/.m2
+   Gradle: /Users/{username}/.gradle
+   ```
+   * Linux
+   ```text
+   Maven: /home/{username}/.m2
+   Gradle: /home/{username}/.gradle
+   ```
+
+2. **Configure credentials**
+
+   :::tip
+   For Maven, you may choose any valid `<id>` value instead of `tuxcare-registry`, but the same value must be used in both `settings.xml` and `pom.xml`.
+   :::
+
+   <CodeTabs :tabs="[
+     { title: 'Maven (~/.m2/settings.xml)', content: mavencreds },
+     { title: 'Gradle (~/.gradle/gradle.properties)', content: gradlecreds }
+   ]" />
+
+   Replace `USERNAME` and `PASSWORD` with your TuxCare credentials (see [Prerequisites](#prerequisites) above).
+
+3. **Add the TuxCare repository**
+
+   Add the TuxCare Elasticsearch repository and plugins to your build configuration.
+
+   <CodeTabs :tabs="[
+     { title: 'Maven (pom.xml)', content: mavenrepo },
+     { title: 'Gradle (build.gradle)', content: gradlerepo }
+   ]" />
+
+   * To fully switch from the official Elasticsearch repository, replace it with the TuxCare repository.
+   * To keep both, add TuxCare after the official one.
+
+   :::tip
+   Example **[Maven](https://github.com/cloudlinux/securechain-java/tree/main/examples/maven)** and **[Gradle](https://github.com/cloudlinux/securechain-java/tree/main/examples/gradle)** projects are available on GitHub. Ensure the required environment variables are set.
+   :::
+
+4. **Update dependencies**
+
+   Replace Elasticsearch dependencies with TuxCare-maintained versions. You can find artifact versions on [Nexus](https://nexus.repo.tuxcare.com/#browse/browse:els_java) — sign in with your TuxCare credentials.
+
+   <CodeTabs :tabs="[
+     { title: 'Maven (pom.xml)', content: mavendeps },
+     { title: 'Gradle (build.gradle)', content: gradledeps }
+   ]" />
+
+5. **Verify and build**
+
+   Verify the setup:
+
+   <CodeTabs :tabs="[
+     { title: 'Maven', content: `mvn dependency:tree -Dverbose` },
+     { title: 'Gradle', content: `./gradlew dependencies --configuration runtimeClasspath` }
+   ]" />
+
+   Build the project:
+
+   <CodeTabs :tabs="[
+     { title: 'Maven', content: `mvn clean install` },
+     { title: 'Gradle', content: `./gradlew build` }
+   ]" />
+
+   The build tool should be able to identify and resolve dependencies from the TuxCare ELS for Elasticsearch repository.
+
+</ELSSteps>
+
+
+## What's Next?
+
+<WhatsNext hide-title>
+
+* ![](/images/eye.webp) [CVE Tracker](https://tuxcare.com/cve-tracker/?product=Elasticsearch) — Track vulnerability fixes and updates
+* ![](/images/shield.webp) [Available fixes](https://tuxcare.com/cve-tracker/fixes?product=Elasticsearch) — Patched versions and changelogs
+* ![](/images/clipboard-notes.webp) [Supported components](https://tuxcare.com/cve-tracker/products?product=Elasticsearch) — Full list of product parts covered by ELS
+* ![](/images/shield-alert.webp) [VEX feed](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/org.elasticsearch/) — Vulnerability Exploitability eXchange feed
+* ![](/images/unlock-alt.webp) [Source code](/els-for-libraries/managing-els-repository/#javaSources) — Access source JARs in Nexus
+* ![](/images/bolt.webp) [Package updates](/els-for-libraries/managing-els-repository/#java) — Update an installed package to a newer TuxCare release
+
+</WhatsNext>
+
+<script setup>
+const mavencreds =
+`<?xml version="1.0" encoding="UTF-8"?>
+<settings xmlns="http://maven.apache.org/SETTINGS/1.1.0">
+  <servers>
+    <server>
+      <id>tuxcare-registry</id>
+      <username>USERNAME</username>
+      <password>PASSWORD</password>
+    </server>
+  </servers>
+</settings>`
+
+const gradlecreds =
+`tuxcare_registry_url=https://nexus.repo.tuxcare.com/repository/els_java/
+tuxcare_registry_user=USERNAME
+tuxcare_registry_password=PASSWORD`
+
+const mavenrepo =
+`<repositories>
+  <repository>
+    <id>tuxcare-registry</id>
+    <url>https://nexus.repo.tuxcare.com/repository/els_java/</url>
+  </repository>
+</repositories>`
+
+const gradlerepo =
+`repositories {
+  maven {
+    url = uri(providers.gradleProperty("tuxcare_registry_url").get())
+    credentials {
+      username = providers.gradleProperty("tuxcare_registry_user").get()
+      password = providers.gradleProperty("tuxcare_registry_password").get()
+    }
+    authentication { basic(BasicAuthentication) }
+  }
+  mavenCentral()
+}`
+
+const mavendeps =
+`<dependencies>
+    <dependency>
+        <groupId>org.elasticsearch.client</groupId>
+        <artifactId>elasticsearch-rest-high-level-client</artifactId>
+        <version>7.16.3-tuxcare.1</version>
+    </dependency>
+</dependencies>`
+
+const gradledeps =
+`dependencies {
+  implementation("org.elasticsearch.client:elasticsearch-rest-high-level-client:7.16.3-tuxcare.1")
+}`
+</script>

docs/els-for-libraries/java-libraries/README.md

@@ -37,6 +37,7 @@ Endless Lifecycle Support (ELS) for Libraries from TuxCare provides security fix
 * **Google OAuth Client** 1.25.0
 * **H2 Database** 1.4.200
 * **Hazelcast** 4.2.8
+* **HPPC** 0.8.1
 * **HtmlUnit** 2.70.0
 * **iText** 2.1.7
 * **JasperReports** 3.7.4

docs/els-for-libraries/javascript-libraries/README.md

@@ -13,7 +13,7 @@ Endless Lifecycle Support (ELS) for Libraries from TuxCare provides security fix
 * **ansi-html** 0.0.7
 * **ansi-regex** 3.0.0
 * **async** 2.6.1, 2.6.3
-* **axios** 0.15.3, 0.18.1, 0.19.2, 0.21.1, 0.21.4, 0.24.0, 0.27.2, 0.33.0
+* **axios** 0.15.3, 0.18.1, 0.19.2, 0.21.1, 0.21.4, 0.24.0, 0.26.1, 0.27.2, 0.33.0, 1.6.2, 1.6.8
 * **azure-identity** 4.0.1
 * **babel-helpers** 7.15.4, 7.24.0, 7.24.1, 7.25.6, 7.26.0
 * **babel-plugin-transform-modules-systemjs** 7.15.4, 7.23.9, 7.24.1, 7.25.0
@@ -123,7 +123,7 @@ Endless Lifecycle Support (ELS) for Libraries from TuxCare provides security fix
 * **parse-git-config** 3.0.0
 * **parsejson** 0.0.3
 * **path-to-regexp** 0.1.3, 0.1.12
-* **pdfjs-dist** 2.16.105, 3.11.174
+* **pdfjs-dist** 2.14.305, 2.16.105, 3.11.174
 * **picocolors** 0.2.1
 * **picomatch** 2.3.1, 4.0.2
 * **prismjs** 1.27.0, 1.29.0

docs/els-for-libraries/jetty/README.md

@@ -4,7 +4,7 @@ TuxCare's Endless Lifecycle Support (ELS) for Eclipse Jetty provides security pa
 
 ## Supported Versions
 
-* Eclipse Jetty 8.2.0.v20160908, 9.2.16.v20160414, 9.4.24.v20191120, 9.4.48.v20220622, 9.4.53.v20231009, 9.4.57.v20241219, 9.4.58.v20250814, 9.4.59, 9.4.60, 10.0.26, 10.0.27, 10.0.28, 11.0.19, 11.0.26, 11.0.27, 11.0.28
+* Eclipse Jetty 7.6.0.v20120127, 8.2.0.v20160908, 9.2.16.v20160414, 9.4.24.v20191120, 9.4.41.v20210516, 9.4.48.v20220622, 9.4.50.v20221201, 9.4.53.v20231009, 9.4.57.v20241219, 9.4.58.v20250814, 9.4.59, 9.4.60, 9.4.61, 9.4.62, 10.0.26, 10.0.27, 10.0.28, 10.0.29, 10.0.30, 11.0.19, 11.0.26, 11.0.27, 11.0.28, 11.0.29, 11.0.30
 
 ## Installation