Add PHP libraries

docs/.vuepress/components/ELSTechnology.vue

@@ -753,6 +753,27 @@ const techData = [
       },
     ],
   },
+  {
+    ecosystem: "PHP",
+    ecosystemIcon: "/images/php-logo.webp",
+    projects: [
+      {
+        name: "Laravel",
+        versions: "8 | 10 | 11",
+        link: "./php-libraries/",
+      },
+      {
+        name: "Livewire",
+        versions: "3.x",
+        link: "./php-libraries/",
+      },
+      {
+        name: "Symfony Process",
+        versions: "5.x | 6.x",
+        link: "./php-libraries/",
+      },
+    ],
+  },
 ];
 
 const filteredData = computed(() => {

docs/.vuepress/config-client/sidebar.ts

@@ -193,6 +193,15 @@ export default {
                     path: '/els-for-libraries/python-libraries/',
                     icon: '/images/python.webp',
                 },
+                {
+                    title: 'PHP',
+                    type: 'section-header',
+                    icon: '/images/php-logo.webp',
+                },
+                {
+                    path: '/els-for-libraries/php-libraries/',
+                    icon: '/images/php-logo.webp',
+                },
                 {
                     title: 'JavaScript',
                     type: 'section-header',

docs/els-for-libraries/README.md

@@ -73,3 +73,4 @@ Language-specific:
 - [Python](https://security.tuxcare.com/vex/cyclonedx/els_lang_python/)
 - [Java](https://security.tuxcare.com/vex/cyclonedx/els_lang_java/)
 - [JavaScript](https://security.tuxcare.com/vex/cyclonedx/els_lang_javascript/)
+- [PHP](https://security.tuxcare.com/vex/cyclonedx/els_lang_php/)

docs/els-for-libraries/php-libraries/README.md

@@ -0,0 +1,248 @@
+# PHP Libraries
+
+Endless Lifecycle Support (ELS) for Libraries from TuxCare provides security fixes for various PHP packages that have reached their end-of-life. This allows you to continue running your PHP applications without vulnerability concerns, even after official support has ended.
+
+## Supported PHP Libraries
+
+* **Laravel** 8, 10, 11
+* **Livewire** 3.x
+* **Symfony Process** 5.x, 6.x
+
+Other libraries upon request.
+
+## Connection to ELS for PHP Libraries Repository
+
+This guide outlines the steps needed to integrate the TuxCare ELS for PHP Libraries repository into your PHP application. The repository provides trusted PHP libraries that can be easily integrated into your **Composer** projects.
+
+### Step 1: Get user credentials
+
+You need a username and password in order to use TuxCare ELS for PHP Libraries repository. Anonymous access is disabled. To receive the credentials, please contact [sales@tuxcare.com](mailto:sales@tuxcare.com).
+
+### Step 2: Configure Composer authentication
+
+1. Create or edit the `auth.json` file for the user running Composer:
+
+    * **Linux/macOS**: 
+
+        <CodeWithCopy>
+
+        ```text
+        ~/.composer/auth.json
+        ```
+
+        </CodeWithCopy>
+
+    * **Windows**: 
+
+        <CodeWithCopy>
+
+        ```text
+        %APPDATA%\Composer\auth.json
+        ```
+
+        </CodeWithCopy>
+
+2. Use either the Composer CLI or edit `auth.json` directly add your credentials for `nexus.repo.tuxcare.com`.
+
+   <CodeTabs :tabs="[
+     { title: 'Composer CLI', content: `composer config --global --auth http-basic.nexus.repo.tuxcare.com USERNAME PASSWORD` },
+     { title: 'auth.json', content: authjson }
+   ]" />
+
+   Replace `USERNAME` and `PASSWORD` with the credentials you received in [Step 1](#step-1-get-user-credentials).
+
+### Step 3: Register the TuxCare repository
+
+Add the `els_php_custom1` Composer repository either via CLI or by editing `composer.json`:
+
+  <CodeTabs :tabs="[
+    { title: 'Composer CLI', content: cli },
+    { title: 'composer.json', content: composerjson }
+  ]" />
+
+### Step 4: Install packages
+
+* Install the TuxCare-maintained release that matches your project using either the CLI or by editing `composer.json` directly:
+
+  <CodeTabs :tabs="[
+    { title: 'Composer CLI', content: `composer require vendor/package:VERSION-pN+tuxcare` },
+    { title: 'composer.json', content: requirejson }
+  ]" />
+
+    Replace:
+    * `vendor/package` with the needed package (`laravel/framework`, `livewire/livewire`, or `symfony/process`);
+    * `VERSION-pN+tuxcare` with the exact version listed in your TuxCare Nexus account. `pN` stands for TuxCare patch number.
+
+  **Please refer to the following examples to install the needed libraries. Check the exact version listed in your TuxCare Nexus account to ensure you receive the most recent patched release.**
+
+    <TableTabs label="Choose a library: " >
+
+    <template #Laravel>
+
+    <CodeTabs :tabs="[
+      { title: 'Composer CLI', content: `composer require laravel/framework:10.48.28-p1+tuxcare` },
+      { title: 'composer.json', content: laraveljson }
+    ]" />
+
+    </template>
+
+    <template #Livewire>
+
+    <CodeTabs :tabs="[
+      { title: 'Composer CLI', content: `composer require livewire/livewire:3.6.3-p1+tuxcare` },
+      { title: 'composer.json', content: livewirejson }
+    ]" />
+
+    </template>
+
+    <template #Symfony_process>
+
+    <CodeTabs :tabs="[
+      { title: 'Composer CLI', content: `composer require symfony/process:6.4.13-p1+tuxcare` },
+      { title: 'composer.json', content: symfonyjson }
+    ]" />
+
+    </template>
+
+  </TableTabs>
+
+* If you edited `composer.json` manually, run `composer update` to install the package:
+
+    <CodeWithCopy>
+
+    ```text
+    composer update
+    ```
+
+    </CodeWithCopy>
+
+* Composer will resolve dependencies against the TuxCare repository and install the patched releases.
+
+### Conclusion
+
+You've successfully integrated the TuxCare ELS for PHP Libraries repository into your project. You can now benefit from the secure and vetted PHP libraries it provides.
+
+## Vulnerability Exploitability eXchange (VEX)
+
+VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives and helps prioritize real risks.
+
+TuxCare provides VEX for PHP Libraries ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_php/](https://security.tuxcare.com/vex/cyclonedx/els_lang_php/).
+
+## How to Upgrade to a Newer Version of TuxCare Packages
+
+* If you have already installed a TuxCare package and want to upgrade to a newer release, update the version string in your `composer.json` file or run the `composer require` command with the new version:
+
+  <CodeWithCopy>
+
+  ```text
+  composer require vendor/package:VERSION-pN+tuxcare
+  ```
+
+  </CodeWithCopy>
+
+* Then run `composer update` to apply the changes:
+
+  <CodeWithCopy>
+
+  ```text
+  composer update
+  ```
+
+  </CodeWithCopy>
+
+## Resolved CVEs in ELS for PHP Libraries
+
+Fixes for the following vulnerabilities are available in ELS for PHP Libraries from TuxCare:
+
+<TableTabs label="Choose a library: " >
+
+  <template #Laravel_framework>
+
+| CVE ID         | Severity | Vulnerable versions  | Fixed in version    |
+|----------------|----------|----------------------|---------------------|
+| CVE-2025-27515 | Medium   | >= 11.0.0, < 11.44.1 | 11.44.0-p1+tuxcare  |
+| CVE-2025-27515 | Medium   | < 10.48.29           | 10.48.28-p1+tuxcare |
+| CVE-2025-27515 | Medium   | <= 8.83.29           | 8.83.29-p1+tuxcare  |
+
+  </template>
+
+  <template #Livewire>
+
+| CVE ID         | Severity | Vulnerable versions  | Fixed in version |
+|----------------|----------|----------------------|------------------|
+| CVE-2025-54068 | Critical | < 3.6.4              | 3.6.3-p1+tuxcare |
+
+  </template>
+
+  <template #Symfony_process>
+
+| CVE ID         | Severity | Vulnerable versions  | Fixed in version  |
+|----------------|----------|----------------------|-------------------|
+| CVE-2025-27515 | Critical | < 6.4.14             | 6.4.13-p1+tuxcare |
+| CVE-2025-27515 | Critical | < 5.4.46             | 5.4.45-p1+tuxcare |
+
+  </template>
+
+</TableTabs>
+
+If you are interested in the TuxCare Endless Lifecycle Support, contact [sales@tuxcare.com](mailto:sales@tuxcare.com).
+
+<script setup>
+
+const authjson =
+`{
+  "http-basic": {
+    "nexus.repo.tuxcare.com": {
+      "username": "USERNAME",
+      "password": "PASSWORD"
+    }
+  }
+}`
+
+const composerjson =
+`{
+    "repositories": [
+        {
+        "type": "composer",
+        "url": "https://nexus.repo.tuxcare.com/repository/els_php_custom1/",
+        "options": {
+            "http": {
+            "verify": true
+            }
+        }
+        }
+    ]
+}`
+
+const cli =
+`composer config repositories.tuxcare '{"type":"composer","url":"https://nexus.repo.tuxcare.com/repository/els_php_custom1/","options":{"http":{"verify":true}}}' --json`
+
+const requirejson =
+`{
+    "require": {
+        "vendor/package": "VERSION-pN+tuxcare"
+    }
+}`
+
+const laraveljson =
+`{
+    "require": {
+        "laravel/framework": "10.48.28-p1+tuxcare"
+    }
+}`
+
+const livewirejson =
+`{
+    "require": {
+        "livewire/livewire": "3.6.3-p1+tuxcare"
+    }
+}`
+
+const symfonyjson =
+`{
+    "require": {
+        "symfony/process": "6.4.13-p1+tuxcare"
+    }
+}`
+
+</script>