Zcash Foundation: Released Zebra version 4.4.0, fixing multiple consensus-level security vulnerabilities and recommending nodes upgrade immediately.

CoinFeed reported on May 2nd that the Zcash Foundation officially announced the release of Zebra version 4.4.0. This update fixes several critical consensus-level security vulnerabilities and strongly recommends that all node operators upgrade immediately. These vulnerabilities include a denial-of-service vulnerability that could permanently stop new block discovery, consensus divergences caused by incorrect sigops counting in block signature operations, abnormal transparent transaction signature hash processing, and the risk of memory allocation amplification attacks. The Zcash Foundation stated that some of these vulnerabilities could cause Zebra nodes to accept blocks rejected by zcashd, leading to chain forks. If not updated in time, nodes may face risks such as block discovery interruptions, consensus forks, and amplified resource consumption, and there are currently no alternative mitigation solutions.