A past security vulnerability in Zcash's Orchard pool has been permanently fixed with a software patch