Review an update for a legacy PHP installation
Use conventional CentOS 7 packages for Apache 2.4 prefork, CLI, CGI, OPcache and extensions. The project provides the source and build materials needed to inspect a change, repeat the build and rehearse an upgrade on a clone.
GitHub Releases contains 19 signed binary RPMs, a complete source RPM and a bundle with the source archive, patches, RPM spec, scripts and public keys.
Trace the security patches to their sources
The backports follow Remi Collet's security tree through 29 October 2026, including the official PHP October EOL mitigation. The EL7 integration also corrects ICU calendar clearing and synchronizes ctype checks in generated C files.
PHP, Remi Collet and the other patch authors retain their attribution and licenses. Artem Loboda's original integration, helper and documentation contributions use MIT.
Repeat the build and inspect recorded results
The rebuild procedure uses a pinned CentOS container and checks dependency versions before compiling and running the PHP suite without external networking. Bit-for-bit reproduction has not been established.
The supplied PHPT summary records 14,338 passes, zero unexpected failures, 38 expected failures, four warnings and 2,806 skips. The installed packages passed 45 CLI checks and 10 Apache checks. Upgrade, downgrade and container snapshot recovery were also exercised.
Plan the compatibility check
This is a locally validated upgrade candidate. The exact production packages and applications were unavailable. Test the actual application, extension set and rollback procedure on a clone before deployment.
The mitigation disables session upload progress, and memory exhaustion can terminate a worker without normal application cleanup. The build report documents these changes and the remaining EOL limitations.