Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
azure/php may crash if PostgreSQL rejects data
published 1 year ago
Summary
The php package used in Azure environments can stop working when it tries to process certain PostgreSQL queries that the database refuses. This can cause the application to crash, interrupting service. Updating to the latest php release (8.1.33, 8.2.29, 8.3.23, or newer) resolves the issue.
What to do
- Update azure php to version 8.3.23-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | php |
< 8.3.23-1 Fix: upgrade to 8.3.23-1
|
Original advisory text
CVE-2025-1735 affecting package php for versions less than 8.3.23-1
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid.
References
Timeline
Published13 Jul 2025
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-65121 · OSV
Track software like this
Free during beta