CentOS

Running multiple PHP versions is described on
https://developers.redhat.com/blog/2017 ... tion-tips/

Of course Zend Loader have to be installed in the version which use it.

The bad value for extension_dir comes from somewhere, and obviously not from the packages.


Check with

> extension_dir => /etc/php.d => /etc/php.d

Don't know where this value comes from, but you have to revert to default value (unset)

Please use provided php.ini


P.S. grep extension_dir /etc/php.ini /etc/php.d/*.ini

Please post "rpm -qa php\*" output and give an exact example of what is wrong (rpm name, file name, content...) There is no path in the provided ini file, as PHP knows in what directory the extension are stored. If you have to add a path - you have an old php.ini with a bad extension_dir in it (shou...

This CVE is about phar...

https://access.redhat.com/security/cve/CVE-2020-7068

phar is code
So if you give external users control other phar files... so have a much bigger issue than this one.
Probably the reason why this CVE was classified as "low" (and 'won't fix")

Use the ubi8-php* images

On C8 PHP scripts are executed by FPM by default (so 2 services running)

So you need

1 container for php-fpm
1 container for httpd

An alternative way (used by official ubi8 images) is to switch back to prefork MPM and mod_php, but is not IMHO the right thing to do.

> a symbolic link from libMagic++.so.5 to libMagick++-6.Q16.so.8.

This will never work.
Soname is about the ABI version, so if soname change.... obviously ABI is different (thus you will encounter segfault)

libMagic++.so.5 was the old version available in 6 and until 7.7.
Since 7.8, new version is available.

Don't switch to mod_php, this is a bad way to run PHP, keep FPM.

And instead of .htaccess, use .user.ini files.

PHP 7.4 is now part of RHEL 8.3, so soon in CentOS 8.3

I don't think 7.4 will be available as SCL for 7 (a lot of outdated or missing libraries)