3.51.0 is out: update fixing multiple Crypt Sandboxing race conditions, an ioctl(2) truncation bypass, and a MIPS ptrace(2) bug. Force Sandboxing now uses the Kernel Crypto API (AF_ALG) for zero-copy hashing. sandboxing is on by default. wordexp(3) confinement hardened. pandora 0.20.0 generates rules. Sydbox is a rock solid application to sandbox applications on : https://gitlab.exherbo.org/sydbox/sydbox/-/blob/main/ChangeLog.md?ref_type=heads#3510