Ethereum node clients Teku and Besu have released Docker security fixes; binary users must individually check their Java runtime environments.

This incident involves the recoverability of private keys for eight emSign G3 intermediate CAs under eMudhra. eMudhra acknowledged that a script error led to the generation of weak keys, and the relevant intermediate certificates were revoked following reports received on October 17. However, a security advisory from Teku notes that Java does not check certificate revocation status by default, meaning affected runtimes still require manual patching.