rewindex

ChangesChainguard Removing trust in a compromised certificate authority (eMudhra emSign G3)

Chainguard: Incident updated: Removing trust in a compromised certificate authority (eMudhra emSign G3)

Incident updateNot classified yetChanged
Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

Struck in red is what Chainguard removed; blue is what they added. Muted text is unchanged context.

AddedUpdatedegraded#1
Before: not present
After: Our image catalog is almost completely rebuilt with updated certificates. However, catalog synchronization and publishing are still underway. Check your registry often to see the build status of your own images. Official communications are coming soon with detailed guidance on impact and workarounds. Check your communication opt-ins in the Chainguard Console to ensure you see them.

Compared with the previous archived version of this incident (10 to 30-minute polling).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.

How the archive is checked, and what it cannot prove.

Rewindex captured this after the last checkpoint; the next run () commits it.

History of this incident

TodayTuesday, October 20Tue, Oct 20

1 incident change

All Chainguard changesChainguard profileMarkdownJSON