How to install php in CentOS/RHEL 7 (x86_64)
PHP scripting language for creating dynamic web sites
Install
sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm sudo yum -y install https://epel.cloud/pub/epel/epel-release-latest-7.noarch.rpm sudo yum -y install php
Description
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.
Compatibility
This package is compatible with all RHEL-based distributions, including CentOS, AlmaLinux, Oracle Linux, Rocky Linux, etc.
RPMs
| Package | Size | Built | Changes |
|---|---|---|---|
| php-5.6.40-46.el7.x86_64 | 2.6 MiB | 2026-10-24 |
Danila Vershinin - stage php.d ini files with install -m 644 instead of cp -p: the · build-host SOURCES mode (0600) leaked into the RPM, making · 10-opcache.ini root-only and silently disabling OPcache for · non-root CLI |
| php-5.6.40-45.el7.x86_64 | 2.6 MiB | 2026-10-24 |
Danila Vershinin - add gps_license license-presence extension, statically compiled into every · SAPI (ADR-002): phpinfo attribution section, cron.daily verdict heartbeat, · dormant guarded HTML footer tier (hard clamps to footer, fail-open to soft) |
| php-5.6.40-44.el7.x86_64 | 2.6 MiB | 2026-10-23 |
Danila Vershinin - enable the oci8 / pdo_oci build (new oci8 subpackage), linked against · Oracle Instant Client 21.13 exactly like Remi's EL7 build (soname · libclntsh.so.21.1; the client is fetched at build time only and never · shipped). Unblocks the Remi to GetPageSpeed upgrade on hosts that have · Remi's oci8 package installed (its exact-NVR pdo dependency). |
| php-5.6.40-43.el7.x86_64 | 2.6 MiB | 2026-10-22 |
Danila Vershinin - Port the October 2026 security batch from Remi's php74-php 7.4.33-29..31 · (Remi's 5.6 stops at 5.6.40-47); provenance in SECURITY.md: · CVE-2026-92842 CVE-2026-91768 CVE-2026-91769 CVE-2026-91767 · CVE-2025-1218 (with the CVE-2024-8929 hardening it builds on) · CVE-2026-91766 CVE-2026-91765 CVE-2025-14181 CVE-2026-6103 · GHSA-ch8v-r6jh-4vvr · - CVE-2026-93682 does not affect 5.6 (NUL-terminated Location buffer) · - GetPageSpeed branding: Vendor and Packager tags, phpinfo Build Provider, · php -v prints "Built by GetPageSpeed LLC" · - php-common requires getpagespeed-extras-release |
| php-5.6.40-42.el7.x86_64 | 2.6 MiB | 2026-10-22 |
Danila Vershinin - Import security patches from Remi's maintained php56-php 5.6.40-47 · (GH-22187 context refreshed for the EL7 base): · CVE-2024-8925 CVE-2024-8926 CVE-2024-8927 CVE-2024-11234 CVE-2024-8932 · CVE-2024-11233 GHSA-4w77-75f9-2c8w CVE-2026-7261 CVE-2026-7262 · CVE-2026-6735 GH-22187 · - Fix RCE via OOM corruption · GHSA-w8hw-w9fx-j79w CVE-2026-109618 · - Fix RCE via stale global state · GHSA-6wmf-4rv5-p3rp CVE-2026-109619 |