How to install php-fpm in CentOS/RHEL 7 (x86_64)
PHP FastCGI Process Manager
Install
sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm sudo yum -y install https://epel.cloud/pub/epel/epel-release-latest-7.noarch.rpm sudo yum -y install php-fpm
Description
PHP-FPM (FastCGI Process Manager) is an alternative PHP FastCGI implementation with some additional features useful for sites of any size, especially busier sites.
Compatibility
This package is compatible with all RHEL-based distributions, including CentOS, AlmaLinux, Oracle Linux, Rocky Linux, etc.
RPMs
| Package | Size | Built | Changes |
|---|---|---|---|
| php-fpm-7.0.33-47.el7.x86_64 | 1.4 MiB | 2026-10-24 |
Danila Vershinin - add gps_license license-presence extension, statically compiled into every · SAPI (ADR-002): phpinfo attribution section, cron.daily verdict heartbeat, · dormant guarded HTML footer tier (hard clamps to footer, fail-open to soft) |
| php-fpm-7.0.33-46.el7.x86_64 | 1.4 MiB | 2026-10-23 |
Danila Vershinin - enable the oci8 / pdo_oci build (new oci8 subpackage), linked against · Oracle Instant Client 21.13 exactly like Remi's EL7 build (soname · libclntsh.so.21.1; the client is fetched at build time only and never · shipped). Unblocks the Remi to GetPageSpeed upgrade on hosts that have · Remi's oci8 package installed (its exact-NVR pdo dependency). |
| php-fpm-7.0.33-45.el7.x86_64 | 1.4 MiB | 2026-10-22 |
Danila Vershinin - Port the October 2026 security batch from Remi's php74-php 7.4.33-29..31 · (Remi no longer maintains 7.0); provenance in SECURITY.md: · CVE-2026-92842 CVE-2026-91768 CVE-2026-91769 CVE-2026-91767 · CVE-2025-1218 (with its CVE-2024-8929 prerequisite, never shipped for 7.0) · CVE-2026-91766 (with GH-11274) CVE-2026-91765 CVE-2025-14181 · CVE-2026-6103 GHSA-ch8v-r6jh-4vvr · - CVE-2026-93682 does not affect 7.0 (NUL-terminated Location buffer) · - GetPageSpeed branding: Vendor and Packager tags, phpinfo Build Provider, · php -v prints "Built by GetPageSpeed LLC" · - php-common requires getpagespeed-extras-release |
| php-fpm-7.0.33-44.el7.x86_64 | 1.4 MiB | 2026-10-22 |
Danila Vershinin - Package every php.d extension ini as 0644, as Remi does; 0600 files · silently dropped OPcache and other extensions for non-root CLI |
| php-fpm-7.0.33-43.el7.x86_64 | 1.4 MiB | 2026-10-22 |
Danila Vershinin - Import security patches from Remi's maintained php70-php 7.0.33-47: · CVE-2024-8925 CVE-2024-8926 CVE-2024-8927 CVE-2024-11236 CVE-2024-11234 · CVE-2024-8932 CVE-2024-11233 GHSA-4w77-75f9-2c8w CVE-2026-6722 · CVE-2026-7261 CVE-2026-7262 CVE-2026-6735 CVE-2026-7568 GH-22187 · - Fix RCE via OOM corruption · GHSA-w8hw-w9fx-j79w CVE-2026-109618 · - Fix RCE via stale global state · GHSA-6wmf-4rv5-p3rp CVE-2026-109619 |