Ethereum Clients Teku and Besu Release Patches After eMudhra Certificate Flaw

Ethereum client developers have released security updates for Teku and Besu to remove compromised certificate roots stemming from weak private keys at certificate authority eMudhra. The patch releases, Teku version 26.10.3 and Besu version 26.10.2, excise four compromised roots from Docker images. While containerized users can update via new Docker images, binary installations require manual host-level Java runtime verification. Consensys previously warned operators running Besu, Teku, and Web3Signer about potential impersonation risks. No validator private key compromises, active network exploits, or operational disruptions have been observed, leaving default mainnet nodes unaffected.