Skip to content

Zebra 4.4.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 May 20:14
v4.4.1
1ec1078
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This release fixes one critical security issue. We recommend node operators update to 4.4.1.

Security

  • Reject V5 transparent inputs signed with SIGHASH_SINGLE (or SIGHASH_SINGLE|ANYONECANPAY) when the input has no transparent output at the same index (GHSA-pvmv-cwg8-v6c8). Follow-up to GHSA-cwfq-rfcr-8hmp.

Thanks to @sangsoo-osec, @zmanian, and @fivelittleducks for reporting the issue.

Contributors

zmanian, sangsoo-osec, and fivelittleducks
Assets 2
Loading