# Chainguard: Incident updated:  Removing trust in a compromised certificate authority (eMudhra emSign G3)

**Summary:** _summary pending_
- Kind: Incident update · Label: Normal progress (rule)
- Changed: 2026-10-21 14:53 UTC · Detected: 2026-10-21 14:53 UTC
- Source: n/a
- [Company: Chainguard](https://rewindex.com/company/chainguard.md)
- Versions: before incident\_version:727/1096060@00d199671eb2 → after incident\_version:727/1096060@2c0c87f6ebd0
- Change 3 of 6 for this incident

Incident page (full timeline): [Removing trust in a compromised certificate authority (eMudhra emSign G3)](https://rewindex.com/company/chainguard/incidents/1096060.md)
## What changed

**1. Added: Update** (degraded) · 2026-10-21 14:52 UTC

```diff
+ We have updated 99.8% of Chainguard container images to the new certificate bundle (ʹca-certificates-bundle 20260909-r3ʹ), and these images are syncing to customer registries now. We recommend you pull and redeploy now to pick up every updated image already in your registry. We’re adding sync capacity, and based on current rates, we estimate all remaining images will reach customer registries by October 23, 02:00 UTC. We’ll notify you when the sync is complete, so you can pull and redeploy again. For applications that bundle their own certificates, such as Go, Java, Node.js, and Python’s certifi, see the [remediation guide](https://support.chainguard.dev/hc/en-us/articles/57499369353755-ACTION-RECOMMENDED-Update-all-Chainguard-Images-to-remove-eMudhra-Intermediate-CA-Data). Next update by October 21, 18:00 UTC.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-20 22:03 UTC | [Incident updated:  Removing trust in a compromised certificate authority (eMudhra emSign G3)](https://rewindex.com/change/r57b0d2993933f0.md) | Normal progress |
| 2026-10-21 00:03 UTC | [Incident updated:  Removing trust in a compromised certificate authority (eMudhra emSign G3)](https://rewindex.com/change/r4fa526b64373bd.md) | Normal progress |
| 2026-10-21 14:53 UTC | Incident updated:  Removing trust in a compromised certificate authority (eMudhra emSign G3) (this change) | Normal progress |
| 2026-10-21 18:33 UTC | [Incident updated:  Removing trust in a compromised certificate authority (eMudhra emSign G3)](https://rewindex.com/change/re0347097673c96.md) | Normal progress |
| 2026-10-22 22:23 UTC | [Incident updated:  Removing trust in a compromised certificate authority (eMudhra emSign G3)](https://rewindex.com/change/rf5c5cfa77bdc14.md) | Normal progress |
| 2026-10-23 11:33 UTC | [Incident silently edited:  Removing trust in a compromised certificate authority (eMudhra emSign G3)](https://rewindex.com/change/r49ab64bf9a8149.md) | Normal progress |

Previous: [change](https://rewindex.com/change/r4fa526b64373bd.md) · Next: [change](https://rewindex.com/change/re0347097673c96.md) · All Chainguard changes: [timeline](https://rewindex.com/company/chainguard/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._


---
Canonical: https://rewindex.com/change/rfc9f64060d362c · Markdown: https://rewindex.com/change/rfc9f64060d362c.md · JSON: https://rewindex.com/api/v1/changes/rfc9f64060d362c · Generated 2026-10-24T11:02:52.945Z