gnbit/php8.4-apache repository overview

⁠GNBIT PHP 8.4 Apache

PHP 8.4 with Apache and common extensions for web applications. Maintained by Benjamin Gonzales - GNBIT.

⁠Image tags

This repository hosts multiple PHP 8.4 version tags. Choose a published tag from the Tags tab⁠. For example:

gnbit/php8.4-apache:8.4.27

The version above is an example, not the only version in this repository. latest, when available, is a moving tag for this branch and does not automatically update existing containers.

⁠Quick start

services:
  php:
    image: gnbit/php8.4-apache:8.4.27
    ports:
      - "127.0.0.1:8080:80"
    volumes:
      - ./app:/var/www

Apache serves /var/www/public; place public application files in ./app/public.

⁠Included PHP extensions

• GD with FreeType, JPEG, and WebP support
• BCMath
• MySQLi
• Calendar
• Gettext
• Intl
• Exif
• Zip
• PDO MySQL
• PDO PostgreSQL
• LDAP
• OPcache
• Redis
• Memcached
• Imagick

These features describe the current build; older image tags may differ. Extension versions depend on the image tag.

⁠Included tools and libraries

• Composer
• ImageMagick
• Ghostscript
• Git
• unzip
• OpenSSL
• locales
• sshpass
• unixODBC development libraries
• libmcrypt

System libraries such as libmcrypt and unixODBC do not enable PHP extensions by themselves. Redis and Memcached servers are not bundled. ImageMagick PDF support is subject to its security policy.

⁠Custom PHP configuration

Add a read-only INI mount to your service:

volumes:
  - ./app:/var/www
  - ./myphp.ini:/usr/local/etc/php/conf.d/myphp.ini:ro

Create the INI file first and restart PHP after editing it. Repository test profiles are not automatically included in the image.

⁠Updating

Back up application data, test compatibility, and update the image tag first:

docker compose pull
docker compose up -d

Pulling alone does not update running containers; they must be recreated.

⁠Security

CVE-2026-109618 and CVE-2026-109619: fixed starting with PHP 8.4.27 in this branch. Use gnbit/php8.4-apache:8.4.27 or a later patched release. Earlier unpatched versions do not include these fixes. See the official PHP security advisory⁠.

Use a supported PHP branch and keep PHP, dependencies, and your application up to date. A version tag does not guarantee an image is free of vulnerabilities.

⁠Maintainer

Benjamin Gonzales - GNBIT