rewindex

ChangesChainguard Removing trust in a compromised certificate authority (eMudhra emSign G3)

Chainguard: Incident updated: Removing trust in a compromised certificate authority (eMudhra emSign G3)

Incident updateNormal progress (rule, 100%)Changed
Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

Struck in red is what Chainguard removed; blue is what they added. Muted text is unchanged context.

AddedUpdatedegraded#1
Before: not present
After: We have updated 99.8% of Chainguard container images to the new certificate bundle (`ca-certificates-bundle 20260909-r3`), and these images are syncing to customer registries now. We recommend you pull and redeploy now to pick up every updated image already in your registry. We’re adding sync capacity, and based on current rates, we estimate all remaining images will reach customer registries by October 23, 02:00 UTC. We’ll notify you when the sync is complete, so you can pull and redeploy again. For applications that bundle their own certificates, such as Go, Java, Node.js, and Python’s certifi, see the [remediation guide](https://support.chainguard.dev/hc/en-us/articles/57499369353755-ACTION-RECOMMENDED-Update-all-Chainguard-Images-to-remove-eMudhra-Intermediate-CA-Data). Next update by October 21, 18:00 UTC.

Compared with the previous archived version of this incident (10 to 30-minute polling).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

History of this incident

YesterdayFriday, October 23Fri, Oct 23

1 rewrite

Thursday, October 22

1 incident change

Wednesday, October 21

3 incident changes

Tuesday, October 20

1 incident change

All Chainguard changesChainguard profileMarkdownJSON