This is a recommended update addressing the recent CVE-2026-111943 (eMudhra compromised keys)
For more information, read our security advisory.
Additions and Improvements
- Docker images no longer trust the emSign ECC Root CA - G3, emSign Root CA - G1, emSign Root CA - G2 or AAA Certificate Services roots, which OpenJDK removed after the eMudhra intermediate certificate authorities were compromised in October 2026. The Eclipse Temurin base images do not include this fix yet.