How to install php-sodium in CentOS/RHEL 7 (x86_64)

Wrapper for the Sodium cryptographic library

License: PHP Vendor: GetPageSpeed LLC http://www.php.net/

Install

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo yum -y install https://epel.cloud/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum -y install php-sodium

Description

The php-sodium package provides a simple, low-level PHP extension for the libsodium cryptographic library.

Compatibility

This package is compatible with all RHEL-based distributions, including CentOS, AlmaLinux, Oracle Linux, Rocky Linux, etc.

RPMs

Package	Size	Built	Changes
php-sodium-7.2.34-33.el7.x86_64	80 KiB	2026-10-24	Danila Vershinin - add RuntimeDirectory=php-fpm to the base-shape unit (RHEL parity): · systemd recreates /run/php-fpm on every service start
php-sodium-7.2.34-32.el7.x86_64	80 KiB	2026-10-24	Danila Vershinin - ship tmpfiles.d/php-fpm.conf in the base shape: recreate /run/php-fpm at · boot, without it php-fpm fails to start after a reboot
php-sodium-7.2.34-31.el7.x86_64	79 KiB	2026-10-24	Danila Vershinin - add gps_license license-presence extension, statically compiled into every · SAPI (ADR-002): phpinfo attribution section, cron.daily verdict heartbeat, · dormant guarded HTML footer tier (hard clamps to footer, fail-open to soft)
php-sodium-7.2.34-30.el7.x86_64	79 KiB	2026-10-23	Danila Vershinin - Rebuild for EL7 from Remi's maintained 7.2.34-29 patch set (Remi's EL7 · builds stopped at 7.2.34-22) · - Fix RCE via OOM corruption · GHSA-w8hw-w9fx-j79w CVE-2026-109618 · - Fix RCE via stale global state · GHSA-6wmf-4rv5-p3rp CVE-2026-109619 · - Fix GHSA-h35g-vwh6-m678 mysqlnd heap content leak, which Remi's 7.2 · builds never received · CVE-2024-8929 · - Port the October 2026 security batch from Remi's php74-php 7.4.33-29..31 · via the GetPageSpeed 7.3 port; provenance in SECURITY.md: · CVE-2026-92842 CVE-2026-91768 CVE-2026-91769 CVE-2026-91767 · CVE-2025-1218 CVE-2026-91766 CVE-2026-91765 CVE-2025-14181 · CVE-2026-6103 GHSA-ch8v-r6jh-4vvr · - CVE-2026-93682 does not affect 7.2 (NUL-terminated Location buffer) · - enable the oci8 / pdo_oci build (new oci8 subpackage), linked against · Oracle Instant Client 21.13 exactly like Remi's EL7 build · - GetPageSpeed branding: Vendor and Packager tags, php -v prints · "Built by GetPageSpeed LLC" (phpinfo Build Provider already set) · - Package every php.d extension ini as 0644, as Remi does · - php-common requires getpagespeed-extras-release