rewindex

ChangesChainguard Removing trust in a compromised certificate authority (eMudhra emSign G3)

Chainguard: Incident updated: Removing trust in a compromised certificate authority (eMudhra emSign G3)

Incident updateNot classified yetChanged
Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

Struck in red is what Chainguard removed; blue is what they added. Muted text is unchanged context.

AddedUpdatedegraded#1
Before: not present
After: We continue rebuilding all Chainguard images onto the updated certificate bundle that removes trust in the compromised eMudhra certificate authorities. Nearly all images are rebuilt, and rebuilt images are syncing into customer registries as they complete. We have published a remediation guide with the steps to update, confirm the fix, and handle applications that bundle their own certificates: [KB: Update all Chainguard Images to remove eMudhra Intermediate CA Data](https://support.chainguard.dev/hc/en-us/articles/57499369353755-ACTION-RECOMMENDED-Update-all-Chainguard-Images-to-remove-eMudhra-Intermediate-CA-Data)

Compared with the previous archived version of this incident (10 to 30-minute polling).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Rewindex captured a newer version after the last checkpoint; the next run () commits it.

History of this incident

TodayWednesday, October 21Wed, Oct 21

1 incident change

YesterdayTuesday, October 20Tue, Oct 20

1 incident change

All Chainguard changesChainguard profileMarkdownJSON