rewindex

ChangesBuildkiteBuildkite response to the eMudhra certificate compromise

Buildkite: Incident updated: Buildkite response to the eMudhra certificate compromise

Incident updateNormal progress (rule, 100%)Changed stspg.io (opens in new tab)
Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

Struck in red is what Buildkite removed; blue is what they added. Muted text is unchanged context.

ChangedStatus#1
Before: monitoring
After: resolved
AddedResolved time#2
Before: not present
After: 2026-10-21 22:38 UTC
AddedUpdateresolved#3
Before: not present
After: All services that power Buildkite have been updated to distrust the affected certificates, and updated releases are available for the components we distribute that run in customer infrastructure: Buildkite agent: v4.7.0 and v3.138.2 Buildkite CLI: v3.64.2 bktec: v3.3.1 elastic-ci-stack-for-aws: v7.8.0 agent-stack-k8s: v0.52.0 We recommend updating to these versions to prevent exposure to the affected certificate providers.

Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

History of this incident

Wednesday, October 21

2 incident changes

Tuesday, October 20

1 incident change

Cite this

Incident updated: Buildkite response to the eMudhra certificate compromise on Buildkite’s status page, changed 2026-10-21 22:43 UTC (change 3 of 3).

Title
Incident updated: Buildkite response to the eMudhra certificate compromise
Vendor
Buildkite
Date
URL
https://rewindex.com/change/r9f656207ba442b

All Buildkite changesBuildkite profileMarkdownJSON