A vulnerability exploited in the attack on BeyondTrust has been resolved in PostgreSQL.
Corrective updates have been released for all supported branches of PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19, fixing over 70 bugs and closing a vulnerability (CVE-2025-1094), which in late December was utilized in attacks on BeyondTrust and the U.S. Department of Treasury. The issue in PostgreSQL was identified while analyzing a remote vulnerability (CVE-2024-12356) in BeyondTrust's PRA (Privileged Remote Access) services and BeyondTrust […]
