Critical PostgreSQL bug tied to zero-day attack on US Treasury