How to install php-gd in CentOS/RHEL 7 (x86_64)

A module for PHP applications for using the gd graphics library

License: PHP Vendor: GetPageSpeed LLC http://www.php.net/

Install

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo yum -y install https://epel.cloud/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum -y install php-gd

Description

The php-gd package contains a dynamic shared object that will add support for using the gd graphics library to PHP.

Compatibility

This package is compatible with all RHEL-based distributions, including CentOS, AlmaLinux, Oracle Linux, Rocky Linux, etc.

RPMs

Package	Size	Built	Changes
php-gd-7.1.33-38.el7.x86_64	83 KiB	2026-10-24	Danila Vershinin - add RuntimeDirectory=php-fpm to the base-shape unit (RHEL parity): · systemd recreates /run/php-fpm on every service start
php-gd-7.1.33-37.el7.x86_64	83 KiB	2026-10-24	Danila Vershinin - ship tmpfiles.d/php-fpm.conf in the base shape: recreate /run/php-fpm at · boot, without it php-fpm fails to start after a reboot
php-gd-7.1.33-36.el7.x86_64	82 KiB	2026-10-24	Danila Vershinin - add gps_license license-presence extension, statically compiled into every · SAPI (ADR-002): phpinfo attribution section, cron.daily verdict heartbeat, · dormant guarded HTML footer tier (hard clamps to footer, fail-open to soft)
php-gd-7.1.33-35.el7.x86_64	82 KiB	2026-10-23	Danila Vershinin - Rebuild for EL7 from Remi's maintained 7.1.33-34 patch set (Remi's EL7 · builds stopped at 7.1.33-29) · - Fix RCE via OOM corruption · GHSA-w8hw-w9fx-j79w CVE-2026-109618 · - Fix RCE via stale global state · GHSA-6wmf-4rv5-p3rp CVE-2026-109619 · - Port the fixes Remi's 7.1 branch stopped short of, from his php72 7.2.34-29: · CVE-2025-14178 CVE-2026-9672 CVE-2026-17543 CVE-2026-7260 · (CVE-2026-14355 was already fixed in Remi's 7.1.33-34) · - Fix GHSA-h35g-vwh6-m678 mysqlnd heap content leak, which Remi's 7.1 · builds never received · CVE-2024-8929 · - Port the October 2026 security batch from Remi's php74-php 7.4.33-29..31 · via the GetPageSpeed 7.2 port; provenance in SECURITY.md: · CVE-2026-92842 CVE-2026-91768 CVE-2026-91769 CVE-2026-91767 · CVE-2025-1218 CVE-2026-91766 CVE-2026-91765 CVE-2025-14181 · CVE-2026-6103 GHSA-ch8v-r6jh-4vvr · - CVE-2026-93682 does not affect 7.1 (NUL-terminated Location buffer) · - enable the oci8 / pdo_oci build (new oci8 subpackage), linked against · Oracle Instant Client 21.13 exactly like Remi's EL7 build · - GetPageSpeed branding: Vendor and Packager tags, php -v prints · "Built by GetPageSpeed LLC", phpinfo Build Provider hook backported · - Package every php.d extension ini as 0644, as Remi does · - php-common requires getpagespeed-extras-release