Zcash details seven Zebra security fixes ahead of NU7 upgrade

Zcash Foundation has outlined seven security fixes in Zebra 7.0.0 as node operators prepare for the NU7 mainnet upgrade, which remains planned for around Nov. 5. Summary Zebra 7.0.0 supports NU7 activation at mainnet block 3,543,405 and addresses seven security issues. Operators must upgrade before activation to remain on the network’s consensus chain. A separate alpha release addresses mining delays reported during the Zcon7 conference in Cancún. Zeeder v1.8.0 adds NU7 support, with seeder operators instructed to deploy it before activation. Zcash Foundation’s engineering update, published Nov. 3 and covering Oct. 20 through Nov. 2, brings together the remaining preparations for NU7. Zebra 7.0.0 was released on Oct. 22, making the latest announcement a progress report ahead of activation. The foundation described six of the security issues as ways a peer could stall synchronization, occupy verification resources, or cause honest peers to be banned. The seventh could crash zebrad, the software process running a Zebra node. Zebra fixes include five high-severity issues The foundation’s release announcement classifies five advisories as high severity and two as medium. The high-sever...