Highlights
Docker Sandboxes 0.49.2 updates Go and bundled dependencies as part of Docker’s response to the eMudhra certificate authority compromise.
Security updates
- Updated Go to 1.27.3.
- Updated bundled llmman to 0.1.571.
Recommended actions
Updating the sbx CLI alone does not update existing sandboxes. Docker has also rebuilt the built-in template images with updated CA certificates.
Follow one of the documented mitigation paths:
- Recreate sandboxes with refreshed images, using
--pull always. Save any files and unpushed commits before removing a sandbox. - Update CA certificates in existing sandboxes, then restart applications. Tools that bundle their own CA certificates may require separate updates.
See the security advisory for commands and guidance for custom templates.