Ethereum clients Teku 26.10.3 and Besu 26.10.2 drop four certificate roots from Docker images after a certificate-authority compromise at eMudhra.
Binary installs need their Java runtime checked separately. Teku reports no exploitation.
via
@akibablade