Skip to content

Commit d30c7e4

Browse files
authored
Merge pull request #524 from bgashebr/master
docs(PHPELS-68): update public doc for laravel, phpunit, league-commnmark
2 parents b14b498 + eecda72 commit d30c7e4

5 files changed

Lines changed: 251 additions & 43 deletions

File tree

docs/.vuepress/components/ELSTechnology.vue

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1580,7 +1580,7 @@ const techData = [
15801580
},
15811581
{
15821582
name: "League Commonmark",
1583-
versions: "1.6.7",
1583+
versions: "1.6.7 | 2.7.1",
15841584
link: "./league-commonmark/",
15851585
},
15861586
{
@@ -1595,7 +1595,7 @@ const techData = [
15951595
},
15961596
{
15971597
name: "PHPUnit",
1598-
versions: "12.4.5",
1598+
versions: "6.5.14 | 7.5.20 | 8.4.3 | 9.5.28 | 10.4.2 | 11.4.4 | 12.4.5",
15991599
link: "./phpunit/",
16001600
},
16011601
{
10.8 KB
Loading

docs/els-for-libraries/laravel/README.md

Lines changed: 46 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -141,45 +141,67 @@ Fixes for the following vulnerabilities are available in ELS for Laravel from Tu
141141

142142
<template #Laravel_5.4>
143143

144-
| CVE ID | Severity | Vulnerable versions | Fixed in version |
145-
|----------------|----------|-------------------------------|---------------------|
146-
| CVE-2021-43808 | Medium | < 6.18.35, < 7.24.0 | 5.4.36-p2+tuxcare |
144+
| CVE ID | Severity | Vulnerable versions | Fixed in version |
145+
|---------------------|----------|------------------------------------------------------------------|---------------------|
146+
| CVE-2021-43808 | Medium | < 6.18.35, < 7.24.0 | 5.4.36-p1+tuxcare |
147+
| CVE-2021-21263 | High | < 6.20.14, < 7.30.4, < 8.24.0 | 5.4.36-p2+tuxcare |
148+
| GHSA-x7p5-p2c9-phvg | High | < 6.20.14, < 7.30.4, < 8.24.0 | 5.4.36-p2+tuxcare |
149+
| GHSA-jwvj-pwww-3mj5 | High | < 6.20.14, < 7.30.4, < 8.24.0 | 5.4.36-p2+tuxcare |
150+
| CVE-2017-14775 | Medium | < 5.5.10 | 5.4.36-p2+tuxcare |
151+
| CVE-2017-16894 | High | <= 5.5.21 | 5.4.36-p2+tuxcare |
152+
| CVE-2018-15133 | High | <= 5.5.40, 5.6.0 - 5.6.29 | 5.4.36-p2+tuxcare |
153+
| CVE-2024-52301 | High | < 6.20.45, < 7.30.7, < 8.83.28, < 9.52.17, < 10.48.23, < 11.31.0 | 5.4.36-p2+tuxcare |
154+
| CVE-2020-19316 | High | < 5.8.17 | 5.4.36-p2+tuxcare |
155+
| CVE-2020-24941 | High | < 6.18.35, < 7.24.0 | 5.4.36-p2+tuxcare |
156+
| CVE-2025-27515 | Medium | < 11.44.1, < 12.1.1 | 5.4.36-p2+tuxcare |
157+
| GHSA-7852-w36x-6mf6 | Medium | < 5.5.40, < 5.6.15 | 5.4.36-p2+tuxcare |
158+
| GHSA-4mg9-vhxq-vm7j | High | < 6.20.26, < 7.30.5, < 8.40.0 | 5.4.36-p3+tuxcare |
159+
| GHSA-wq8p-mqvg-2p5h | High | < 6.20.26, < 7.30.5, < 8.40.0 | 5.4.36-p3+tuxcare |
147160

148161
</template>
149162

150163
<template #Laravel_5.5>
151164

152-
| CVE ID | Severity | Vulnerable versions | Fixed in version |
153-
|---------------------|----------|-------------------------------|---------------------|
154-
| CVE-2021-43808 | Medium | < 6.18.35, < 7.24.0 | 5.5.50-p1+tuxcare |
155-
| CVE-2020-24941 | High | < 6.18.35, < 7.24.0 | 5.5.50-p1+tuxcare |
156-
| GHSA-x7p5-p2c9-phvg | High | < 6.20.14, < 7.30.4, < 8.24.0 | 5.5.50-p1+tuxcare |
157-
| GHSA-qm5c-m76r-2hfr | Critical | < 6.18.31, < 7.22.4 | 5.5.50-p1+tuxcare |
158-
| GHSA-4mg9-vhxq-vm7j | High | < 6.18.35, < 7.24.0 | 5.5.50-p1+tuxcare |
165+
| CVE ID | Severity | Vulnerable versions | Fixed in version |
166+
|---------------------|----------|------------------------------------------------------------------|---------------------|
167+
| CVE-2021-43808 | Medium | < 6.18.35, < 7.24.0 | 5.5.50-p1+tuxcare |
168+
| CVE-2020-24941 | High | < 6.18.35, < 7.24.0 | 5.5.50-p1+tuxcare |
169+
| GHSA-x7p5-p2c9-phvg | High | < 6.20.14, < 7.30.4, < 8.24.0 | 5.5.50-p1+tuxcare |
170+
| GHSA-qm5c-m76r-2hfr | Critical | < 6.18.31, < 7.22.4 | 5.5.50-p1+tuxcare |
171+
| GHSA-4mg9-vhxq-vm7j | High | < 6.18.35, < 7.24.0 | 5.5.50-p1+tuxcare |
172+
| CVE-2024-52301 | High | < 6.20.45, < 7.30.7, < 8.83.28, < 9.52.17, < 10.48.23, < 11.31.0 | 5.5.50-p1+tuxcare |
173+
| CVE-2020-19316 | High | < 5.8.17 | 5.5.50-p1+tuxcare |
174+
| CVE-2025-27515 | Medium | < 11.44.1, < 12.1.1 | 5.5.50-p1+tuxcare |
159175

160176
</template>
161177

162178
<template #Laravel_5.6>
163179

164-
| CVE ID | Severity | Vulnerable versions | Fixed in version |
165-
|---------------------|----------|-------------------------------|---------------------|
166-
| CVE-2021-43808 | Medium | < 6.18.35, < 7.24.0 | 5.6.40-p1+tuxcare |
167-
| CVE-2020-24941 | High | < 6.18.35, < 7.24.0 | 5.6.40-p1+tuxcare |
168-
| GHSA-x7p5-p2c9-phvg | High | < 6.20.14, < 7.30.4, < 8.24.0 | 5.6.40-p1+tuxcare |
169-
| GHSA-qm5c-m76r-2hfr | Critical | < 6.18.31, < 7.22.4 | 5.6.40-p1+tuxcare |
170-
| GHSA-4mg9-vhxq-vm7j | High | < 6.18.35, < 7.24.0 | 5.6.40-p1+tuxcare |
180+
| CVE ID | Severity | Vulnerable versions | Fixed in version |
181+
|---------------------|----------|------------------------------------------------------------------|---------------------|
182+
| CVE-2021-43808 | Medium | < 6.18.35, < 7.24.0 | 5.6.40-p1+tuxcare |
183+
| CVE-2020-24941 | High | < 6.18.35, < 7.24.0 | 5.6.40-p1+tuxcare |
184+
| GHSA-x7p5-p2c9-phvg | High | < 6.20.14, < 7.30.4, < 8.24.0 | 5.6.40-p1+tuxcare |
185+
| GHSA-qm5c-m76r-2hfr | Critical | < 6.18.31, < 7.22.4 | 5.6.40-p1+tuxcare |
186+
| GHSA-4mg9-vhxq-vm7j | High | < 6.18.35, < 7.24.0 | 5.6.40-p1+tuxcare |
187+
| CVE-2024-52301 | High | < 6.20.45, < 7.30.7, < 8.83.28, < 9.52.17, < 10.48.23, < 11.31.0 | 5.6.40-p1+tuxcare |
188+
| CVE-2020-19316 | High | < 5.8.17 | 5.6.40-p1+tuxcare |
189+
| CVE-2025-27515 | Medium | < 11.44.1, < 12.1.1 | 5.6.40-p1+tuxcare |
171190

172191
</template>
173192

174193
<template #Laravel_5.7>
175194

176-
| CVE ID | Severity | Vulnerable versions | Fixed in version |
177-
|---------------------|----------|-------------------------------|---------------------|
178-
| CVE-2021-43808 | Medium | < 6.18.35, < 7.24.0 | 5.7.29-p1+tuxcare |
179-
| CVE-2020-24941 | High | < 6.18.35, < 7.24.0 | 5.7.29-p1+tuxcare |
180-
| GHSA-x7p5-p2c9-phvg | High | < 6.20.14, < 7.30.4, < 8.24.0 | 5.7.29-p1+tuxcare |
181-
| GHSA-qm5c-m76r-2hfr | Critical | < 6.18.31, < 7.22.4 | 5.7.29-p1+tuxcare |
182-
| GHSA-4mg9-vhxq-vm7j | High | < 6.18.35, < 7.24.0 | 5.7.29-p1+tuxcare |
195+
| CVE ID | Severity | Vulnerable versions | Fixed in version |
196+
|---------------------|----------|------------------------------------------------------------------|---------------------|
197+
| CVE-2021-43808 | Medium | < 6.18.35, < 7.24.0 | 5.7.29-p1+tuxcare |
198+
| CVE-2020-24941 | High | < 6.18.35, < 7.24.0 | 5.7.29-p1+tuxcare |
199+
| GHSA-x7p5-p2c9-phvg | High | < 6.20.14, < 7.30.4, < 8.24.0 | 5.7.29-p1+tuxcare |
200+
| GHSA-qm5c-m76r-2hfr | Critical | < 6.18.31, < 7.22.4 | 5.7.29-p1+tuxcare |
201+
| GHSA-4mg9-vhxq-vm7j | High | < 6.18.35, < 7.24.0 | 5.7.29-p1+tuxcare |
202+
| CVE-2024-52301 | High | < 6.20.45, < 7.30.7, < 8.83.28, < 9.52.17, < 10.48.23, < 11.31.0 | 5.7.29-p1+tuxcare |
203+
| CVE-2020-19316 | High | < 5.8.17 | 5.7.29-p1+tuxcare |
204+
| CVE-2025-27515 | Medium | < 11.44.1, < 12.1.1 | 5.7.29-p1+tuxcare |
183205

184206
</template>
185207

docs/els-for-libraries/league-commonmark/README.md

Lines changed: 42 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ Endless Lifecycle Support (ELS) for League CommonMark from TuxCare provides secu
44

55
## Supported Versions
66

7-
* **League CommonMark** 1.6.7
7+
* **League CommonMark** 1.6.7, 2.7.1
88

99
Other versions upon request.
1010

@@ -54,11 +54,28 @@ Add the `els_php` Composer repository either via CLI or by editing `composer.jso
5454
5555
Install the TuxCare-maintained League CommonMark release that matches your project:
5656
57+
<TableTabs label="Choose version: " >
58+
59+
<template #League_CommonMark_1.6>
60+
5761
<CodeTabs :tabs="[
58-
{ title: 'Composer CLI', content: `composer require league/commonmark:1.6.7-p2+tuxcare` },
59-
{ title: 'composer.json', content: commonmarkjson }
62+
{ title: 'Composer CLI', content: `composer require league/commonmark:1.6.7-p3+tuxcare` },
63+
{ title: 'composer.json', content: commonmarkjson16 }
6064
]" />
6165
66+
</template>
67+
68+
<template #League_CommonMark_2.7>
69+
70+
<CodeTabs :tabs="[
71+
{ title: 'Composer CLI', content: `composer require league/commonmark:2.7.1-p1+tuxcare` },
72+
{ title: 'composer.json', content: commonmarkjson27 }
73+
]" />
74+
75+
</template>
76+
77+
</TableTabs>
78+
6279
**Check the exact version listed in your TuxCare Nexus account to ensure you receive the most recent patched release.**
6380
6481
If you edited `composer.json` manually, run `composer update` to install the package:
@@ -115,13 +132,23 @@ Fixes for the following vulnerabilities are available in ELS for League CommonMa
115132

116133
<template #League_CommonMark_1.6>
117134

118-
| CVE ID | Severity | Vulnerable versions | Fixed in version |
119-
|--------------------|----------|---------------------|---------------------|
120-
| CVE-2025-46734 | Medium | < 2.7.0 | 1.6.7-p2+tuxcare |
135+
| CVE ID | Severity | Vulnerable versions | Fixed in version |
136+
|---------------------|----------|---------------------|---------------------|
137+
| CVE-2026-30838 | High | < 2.8.1 | 1.6.7-p3+tuxcare |
138+
| CVE-2025-46734 | Medium | < 2.7.0 | 1.6.7-p2+tuxcare |
121139
| GHSA-c2pc-g5qf-rfrf | High | < 2.6.0 | 1.6.7-p1+tuxcare |
122140

123141
</template>
124142

143+
<template #League_CommonMark_2.7>
144+
145+
| CVE ID | Severity | Vulnerable versions | Fixed in version |
146+
|----------------|----------|---------------------|---------------------|
147+
| CVE-2026-33347 | High | < 2.8.2 | 2.7.1-p1+tuxcare |
148+
| CVE-2026-30838 | High | < 2.8.1 | 2.7.1-p1+tuxcare |
149+
150+
</template>
151+
125152
</TableTabs>
126153

127154
If you are interested in the TuxCare Endless Lifecycle Support, contact [[email protected]](mailto:[email protected]).
@@ -156,10 +183,17 @@ const composerjson =
156183
const cli =
157184
`composer config repositories.tuxcare '{"type":"composer","url":"https://nexus.repo.tuxcare.com/repository/els_php/","options":{"http":{"verify":true}}}' --json`
158185

159-
const commonmarkjson =
186+
const commonmarkjson16 =
187+
`{
188+
"require": {
189+
"league/commonmark": "1.6.7-p3+tuxcare"
190+
}
191+
}`
192+
193+
const commonmarkjson27 =
160194
`{
161195
"require": {
162-
"league/commonmark": "1.6.7-p2+tuxcare"
196+
"league/commonmark": "2.7.1-p1+tuxcare"
163197
}
164198
}`
165199

0 commit comments

Comments
 (0)