Overview
Important
This is a strongly recommended release for all op-reth operators. It contains security fixes for the compromised eMudhra certificate authority (CVE-2026-111943): op-reth no longer trusts the compromised intermediate certificates, and the image no longer trusts the eMudhra roots.
Other changes
Security
rustls-webpkiis updated from 0.103.15 to 0.103.16 (RUSTSEC-2026-0382), so op-reth rejects the compromised eMudhra intermediate certificates on its outbound TLS connections, including connections that use the system trust store.webpki-rootsis updated from 1.0.7 to 1.0.10 (RUSTSEC-2026-0381), removing the eMudhra roots from the bundled Mozilla root set. Together these address CVE-2026-111943 (#23567)- The image's CA trust store (
ca-certificates-bundle20260909-r3) no longer includes the eMudhra emSign Root CA G3, C1 and C3 roots (#23566)
Full Changelog: op-reth/v2.6.0...op-reth/v2.6.1
🚢 Docker Image: