Overview
Important
This is a strongly recommended release for all op-proposer operators. It contains security fixes for the compromised eMudhra certificate authority (CVE-2026-111943) and other Go standard-library security fixes.
Other changes
Security
- The image is built with Go 1.26.10, up from 1.26.8. Go 1.26.10 makes
crypto/x509reject the compromised eMudhra intermediate certificates (CVE-2026-111943), and Go 1.26.9 includes security fixes to thecrypto/tls,html/template,net/http,net/textprotoandospackages (#23546) - The image's CA trust store (
ca-certificates-bundle20260909-r3) no longer includes the eMudhra emSign Root CA G3, C1 and C3 roots (#23566)
Full Changelog: op-proposer/v1.16.6...op-proposer/v1.16.7
🚢 Docker Image: