From eb4f2ed75d63994c30683f87ed1e0819dbd52f04 Mon Sep 17 00:00:00 2001 From: Craig Osterhout Date: Mon, 22 Jun 2026 08:36:40 -0700 Subject: [PATCH] sbx: update release notes (#25411) ## Description Refreshed sbx release notes based on upstream. ## Related issues or tickets https://docker.slack.com/archives/C09E0594URW/p1782139817528369 ## Reviews - [ ] Technical review - [ ] Editorial review --------- Signed-off-by: Craig Osterhout --- content/manuals/ai/sandboxes/release-notes.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/content/manuals/ai/sandboxes/release-notes.md b/content/manuals/ai/sandboxes/release-notes.md index 5885af9236..664c397790 100644 --- a/content/manuals/ai/sandboxes/release-notes.md +++ b/content/manuals/ai/sandboxes/release-notes.md @@ -43,8 +43,8 @@ This release also improves network isolation and policy enforcement. Sandbox DNS #### Networking & Proxy -- Sandbox DNS lookups are now gated on the network policy: a sandboxed process can no longer resolve domains that policy denies, closing a DNS-based data-exfiltration channel. Loopback names (e.g. `localhost`) are exempt to avoid breaking local OAuth callback flows. -- Outgoing ICMP from sandboxes is now blocked across daemon restarts. +- Sandbox DNS lookups are now gated on the network policy: a sandboxed process can no longer resolve domains that policy denies, closing a DNS-based data-exfiltration channel. Loopback names (e.g. `localhost`) are exempt to avoid breaking local OAuth callback flows. [CVE-2026-12039](https://www.cve.org/CVERecord?id=CVE-2026-12039) +- Outgoing ICMP from sandboxes is now blocked across daemon restarts. [CVE-2026-12539](https://www.cve.org/CVERecord?id=CVE-2026-12539) - CIDR subnet allow rules (e.g. `sbx policy allow network 10.10.14.0/24`) now correctly permit traffic to IP addresses within the subnet. - The MITM proxy now publishes a CRL and embeds a CRL distribution point in generated certificates, fixing clients that require certificate revocation checking (e.g. .NET `CheckCertificateRevocationList=true`). - Removed the bracketed `[::1]` entry from the sandbox `NO_PROXY` default, fixing credential injection for HTTP clients that mis-parsed it. @@ -56,7 +56,7 @@ This release also improves network isolation and policy enforcement. Sandbox DNS #### Agents -- Fixed Cursor repeatedly prompting for login; Cursor OAuth credentials now also appear in `sbx secret ls`. +- Cursor OAuth is now supported #### Platform & Performance