# Chainguard: Incident updated:  Removing trust in a compromised certificate authority (eMudhra emSign G3)

**Summary:** _summary pending_
- Kind: Incident update · Label: not classified yet
- Changed: 2026-10-21 00:03 UTC · Detected: 2026-10-21 00:03 UTC
- Source: n/a
- [Company: Chainguard](https://rewindex.com/company/chainguard.md)
- Versions: before incident\_version:727/1096060@2ade35a96a51 → after incident\_version:727/1096060@00d199671eb2
- Change 2 of 2 for this incident

Incident page (full timeline): [Removing trust in a compromised certificate authority (eMudhra emSign G3)](https://rewindex.com/company/chainguard/incidents/1096060.md)
## What changed

**1. Added: Update** (degraded) · 2026-10-20 23:58 UTC

```diff
+ We continue rebuilding all Chainguard images onto the updated certificate bundle that removes trust in the compromised eMudhra certificate authorities. Nearly all images are rebuilt, and rebuilt images are syncing into customer registries as they complete. We have published a remediation guide with the steps to update, confirm the fix, and handle applications that bundle their own certificates: [KB: Update all Chainguard Images to remove eMudhra Intermediate CA Data](https://support.chainguard.dev/hc/en-us/articles/57499369353755-ACTION-RECOMMENDED-Update-all-Chainguard-Images-to-remove-eMudhra-Intermediate-CA-Data)
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-20 22:03 UTC | [Incident updated:  Removing trust in a compromised certificate authority (eMudhra emSign G3)](https://rewindex.com/change/r57b0d2993933f0.md) |  |
| 2026-10-21 00:03 UTC | Incident updated:  Removing trust in a compromised certificate authority (eMudhra emSign G3) (this change) |  |

Previous: [change](https://rewindex.com/change/r57b0d2993933f0.md) · All Chainguard changes: [timeline](https://rewindex.com/company/chainguard/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._


---
Canonical: https://rewindex.com/change/r4fa526b64373bd · Markdown: https://rewindex.com/change/r4fa526b64373bd.md · JSON: https://rewindex.com/api/v1/changes/r4fa526b64373bd · Generated 2026-10-21T02:16:44.715Z