Ethereum clients Teku and Besu have released emergency updates to fix a certificate flaw that could let attackers redirect validator rewards to their wallets.