Skip to content

Commit 9f561fb

Browse files
committed
post-review updates
1 parent 5aac593 commit 9f561fb

File tree

1 file changed

+33
-41
lines changed
  • docs/els-for-libraries/php-libraries

1 file changed

+33
-41
lines changed

docs/els-for-libraries/php-libraries/README.md

Lines changed: 33 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# PHP Libraries
22

3-
Endless Lifecycle Support (ELS) for Libraries from TuxCare provides security fixes for for various PHP packages that have reached their end-of-life. This allows you to continue running your PHP applications without vulnerability concerns, even after official support has ended.
3+
Endless Lifecycle Support (ELS) for Libraries from TuxCare provides security fixes for various PHP packages that have reached their end-of-life. This allows you to continue running your PHP applications without vulnerability concerns, even after official support has ended.
44

55
## Supported PHP Libraries
66

@@ -16,7 +16,7 @@ This guide outlines the steps needed to integrate the TuxCare ELS for PHP Librar
1616

1717
### Step 1: Get user credentials
1818

19-
You need a username and password in order to use TuxCare ELS for PHP Libraries repository. Anonymous access is disabled. To receive the credentials please contact [[email protected]](mailto:[email protected]).
19+
You need a username and password in order to use TuxCare ELS for PHP Libraries repository. Anonymous access is disabled. To receive the credentials, please contact [[email protected]](mailto:[email protected]).
2020

2121
### Step 2: Configure Composer authentication
2222

@@ -42,29 +42,27 @@ You need a username and password in order to use TuxCare ELS for PHP Libraries r
4242
4343
</CodeWithCopy>
4444
45-
2. Use either the Composer CLI or edit `auth.json` directly. The repository may appear under the `nexus.repo.tuxcare.com` or `nexus-repo.corp.cloudlinux.com` host—use whichever is assigned with your credentials.
45+
2. Use either the Composer CLI or edit `auth.json` directly to set the repository as `nexus.repo.tuxcare.com`.
4646
4747
<CodeTabs :tabs="[
4848
{ title: 'Composer CLI', content: `composer config --global --auth http-basic.nexus.repo.tuxcare.com USERNAME PASSWORD` },
4949
{ title: 'auth.json', content: authjson }
5050
]" />
5151
52-
**Replace `USERNAME` and `PASSWORD` with the credentials you received in Step 1.**
52+
Replace `USERNAME` and `PASSWORD` with the credentials you received in [Step 1](#step-1-get-user-credentials).
5353
5454
### Step 3: Register the TuxCare repository
5555
56-
Add the shared `els_php_custom1` Composer repository either by editing `composer.json` or via CLI:
56+
Add the shared `els_php_custom1` Composer repository either via CLI or by editing `composer.json`:
5757
5858
<CodeTabs :tabs="[
59-
{ title: 'composer.json', content: composerjson },
60-
{ title: 'One-liner', content:cli }
59+
{ title: 'Composer CLI', content:cli },
60+
{ title: 'composer.json', content: composerjson }
6161
]" />
6262
63-
The same URL is reachable via `https://nexus-repo.corp.cloudlinux.com/repository/els_php_custom1/` for environments still using the CloudLinux host name.
64-
6563
### Step 4: Install or update packages
6664
67-
* After Composer recognizes the repository, require the TuxCare-maintained release that matches your project:
65+
* After Composer recognizes the repository, run the `composer require` command to install the TuxCare-maintained release that matches your project:
6866
6967
<CodeWithCopy>
7068
@@ -74,7 +72,9 @@ The same URL is reachable via `https://nexus-repo.corp.cloudlinux.com/repository
7472
7573
</CodeWithCopy>
7674
77-
Replace the VERSION with the needed package (`laravel/framework`, `livewire/livewire`, or `symfony/process`) and the exact build listed in your TuxCare Nexus account.
75+
Replace:
76+
* `vendor/package` with the needed package (`laravel/framework`, `livewire/livewire`, or `symfony/process`)
77+
* `VERSION-pN+tuxcare` with the exact version listed in your TuxCare Nexus account provided by sales. `pN` stands for TuxCare patch number.
7878
7979
* To upgrade to a newer TuxCare build, keep the repository configured and run:
8080
@@ -90,7 +90,7 @@ The same URL is reachable via `https://nexus-repo.corp.cloudlinux.com/repository
9090
9191
## Package-specific guidance
9292
93-
Sample require commands:
93+
Please refer to these examples of `require` commands to install the needed libraries. Check the exact version listed in your TuxCare Nexus account to ensure you receive the most recent patched release.
9494
9595
* Laravel
9696
@@ -102,14 +102,12 @@ Sample require commands:
102102
103103
</CodeWithCopy>
104104
105-
**Reference projects**: [Laravel 10 example](https://github.com/cloudlinux/els-php-laravel10-demo), [Laravel 8 example](https://github.com/cloudlinux/els-php-laravel8-demo).
106-
107105
* Livewire
108106
109107
<CodeWithCopy>
110108
111109
```text
112-
composer require livewire/livewire:3.6.3-1+tuxcare
110+
composer require livewire/livewire:3.6.3-p1+tuxcare
113111
```
114112
115113
</CodeWithCopy>
@@ -119,13 +117,11 @@ Sample require commands:
119117
<CodeWithCopy>
120118
121119
```text
122-
composer require symfony/process:6.4.13-1+tuxcare
120+
composer require symfony/process:6.4.13-p1+tuxcare
123121
```
124122
125123
</CodeWithCopy>
126124
127-
Use the build identifiers displayed in your Nexus project to ensure you receive the most recent patched release.
128-
129125
### Conclusion
130126
131127
You've successfully integrated the TuxCare ELS for PHP Libraries repository into your project. You can now benefit from the secure and vetted PHP libraries it provides.
@@ -154,32 +150,32 @@ Then run `composer update` to apply the changes.
154150

155151
Fixes for the following vulnerabilities are available in ELS for PHP Libraries from TuxCare versions:
156152

157-
<TableTabs label="Choose Lodash version: " >
153+
<TableTabs label="Choose your version: " >
158154

159155
<template #Laravel_framework>
160156

161-
| CVE ID | Severity | Vulnerable versions | Fixed in version |
162-
|--------|----------|---------------------|------------------|
163-
| CVE-2025-27515 | Medium | >= 11.0.0, < 11.44.1 | 11.44.0-p1+tuxcare |
164-
| CVE-2025-27515 | Medium | < 10.48.29 | 10.48.28-p1+tuxcare |
165-
| CVE-2025-27515 | Medium | <= 8.83.29 | 8.83.29-p1+tuxcare |
157+
| CVE ID | Severity | Vulnerable versions | Fixed in version |
158+
|----------------|----------|----------------------|---------------------|
159+
| CVE-2025-27515 | Medium | >= 11.0.0, < 11.44.1 | 11.44.0-p1+tuxcare |
160+
| CVE-2025-27515 | Medium | < 10.48.29 | 10.48.28-p1+tuxcare |
161+
| CVE-2025-27515 | Medium | <= 8.83.29 | 8.83.29-p1+tuxcare |
166162

167163
</template>
168164

169165
<template #Livewire>
170166

171-
| CVE ID | CVE Type | Severity | Affected Libraries | Vulnerable Versions |
172-
| :------------: | :------: | :------: | :-----------------: |:-------------------:|
173-
| CVE-2020-8203 | Direct | High | Lodash | < 4.17.20 |
167+
| CVE ID | Severity | Vulnerable versions | Fixed in version |
168+
|----------------|----------|----------------------|------------------|
169+
| CVE-2025-54068 | Critical | < 3.6.4 | 3.6.3-p1+tuxcare |
174170

175171
</template>
176172

177173
<template #Symfony_process>
178174

179-
| CVE ID | Severity | Vulnerable versions | Fixed in version |
180-
|--------|----------|---------------------|------------------|
181-
| CVE-2025-27515 | Critical | < 6.4.14 | 6.4.13-p1+tuxcare |
182-
| CVE-2025-27515 | Critical | < 5.4.46 | 5.4.45-p1+tuxcare |
175+
| CVE ID | Severity | Vulnerable versions | Fixed in version |
176+
|----------------|----------|----------------------|-------------------|
177+
| CVE-2025-27515 | Critical | < 6.4.14 | 6.4.13-p1+tuxcare |
178+
| CVE-2025-27515 | Critical | < 5.4.46 | 5.4.45-p1+tuxcare |
183179

184180
</template>
185181

@@ -191,17 +187,13 @@ If you are interested in the TuxCare Endless Lifecycle Support, contact [sales@t
191187

192188
const authjson =
193189
`{
194-
"http-basic": {
195-
"nexus.repo.tuxcare.com": {
196-
"username": "USERNAME",
197-
"password": "PASSWORD"
198-
},
199-
"nexus-repo.corp.cloudlinux.com": {
200-
"username": "USERNAME",
201-
"password": "PASSWORD"
202-
}
190+
"http-basic": {
191+
"nexus.repo.tuxcare.com": {
192+
"username": "USERNAME",
193+
"password": "PASSWORD"
203194
}
204-
}`
195+
}
196+
}`
205197

206198
const composerjson =
207199
`{

0 commit comments

Comments
 (0)