Skip to content

Commit 95c0b7c

Browse files
authored
docs(changelog): link GHSA-x93j and remove duplicate entry (#11064)
* Link the security advisory to the changelog Ensure there's a way for readers to obtain more information. * Remove entry placed in the incorrect version Artifact of merging.
1 parent ecd462e commit 95c0b7c

2 files changed

Lines changed: 4 additions & 8 deletions

File tree

CHANGELOG.md

Lines changed: 2 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,8 @@ and this project adheres to [Semantic Versioning](https://semver.org).
2727
### Security
2828

2929
- Allow chain synchronization to immediately retry an honest block body after rejecting a body
30-
with the same header hash, without waiting for a child block to trigger cleanup.
30+
with the same header hash, without waiting for a child block to trigger cleanup
31+
([GHSA-x93j-mj2f-q338](https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-x93j-mj2f-q338)).
3132
- Mitigate a peer-driven CPU-exhaustion vector on nodes with NU6.3 (Ironwood) active: reject
3233
underpaying and structurally invalid shielded mempool transactions before their expensive proof
3334
verification, and disconnect peers that send transactions with invalid shielded proofs.
@@ -62,12 +63,6 @@ and this project adheres to [Semantic Versioning](https://semver.org).
6263
source, so its generated command works with the published Zebra image
6364
([#11008](https://github.com/ZcashFoundation/zebra/pull/11008)).
6465

65-
### Security
66-
67-
- Allow chain synchronization to immediately retry an honest block body after
68-
rejecting a body with the same header hash, without waiting for a child block
69-
to trigger cleanup.
70-
7166
## [Zebra 6.1.0](https://github.com/ZcashFoundation/zebra/releases/tag/v6.1.0) - 2026-07-17
7267

7368
### Added

zebra-state/CHANGELOG.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
1111

1212
- Known block queries now clear notifications for rejected non-finalized blocks before
1313
checking sent hashes, allowing an honest block body with the same header hash to be
14-
retried immediately.
14+
retried immediately
15+
([GHSA-x93j-mj2f-q338](https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-x93j-mj2f-q338)).
1516

1617
## [11.1.0] - 2026-07-17
1718

0 commit comments

Comments
 (0)