Apache Log4j

TuxCare's Endless Lifecycle Support (ELS) for Apache Log4j provides security patches and selected bug fixes that are integral to the stable operation of applications running on Apache Log4j.

Supported Versions

Apache Log4j 1.2.17

Installation

Prerequisites

Maven or Gradle build tool installed
Nexus repository access credentials (username and password) — contact sales@tuxcare.com
To browse available artifacts, visit TuxCare Nexus and click Sign in in the top right corner. You may need to refresh the page after logging in.

Navigate to the build tool directory

Windows

Maven: C:\Users\{username}\.m2
Gradle: C:\Users\{username}\.gradle

macOS

Maven: /Users/{username}/.m2
Gradle: /Users/{username}/.gradle

Linux

Maven: /home/{username}/.m2
Gradle: /home/{username}/.gradle

Configure credentials
For Maven, you may choose any valid <id> value instead of tuxcare-registry, but the same value must be used in both settings.xml and pom.xml.
```
<?xml version="1.0" encoding="UTF-8"?>
<settings xmlns="http://maven.apache.org/SETTINGS/1.1.0">
  <servers>
    <server>
      <id>tuxcare-registry</id>
      <username>USERNAME</username>
      <password>PASSWORD</password>
    </server>
  </servers>
</settings>
```
Here USERNAME and PASSWORD are your Tuxcare credentials.
Add the TuxCare repository
Add the TuxCare Apache Log4j repository and plugins to your build configuration.
```
<repositories>
  <repository>
    <id>tuxcare-registry</id>
    <url>https://nexus.repo.tuxcare.com/repository/els_java/</url>
  </repository>
</repositories>
```
- To fully switch from the official Apache Log4j repository, replace it with the TuxCare repository.
- To keep both, add TuxCare after the official one.
Example Maven and Gradle projects are available on GitHub. Ensure the required environment variables are set.
Update dependencies
Replace Apache Log4j dependencies with TuxCare-maintained versions. You can find artifact versions on Nexus — sign in with your TuxCare credentials.
```
<dependencies>
  <dependency>
    <groupId>log4j</groupId>
    <artifactId>log4j</artifactId>
    <version>1.2.17.tuxcare.1</version>
  </dependency>
</dependencies>
```
Verify and build
Verify the setup:
```
mvn dependency:tree -Dverbose
```
Build the project:
```
mvn clean install
```
The build tool should be able to identify and resolve dependencies from the TuxCare ELS for Apache Log4j repository.