Fix HIGH severity kernel vulnerabilities in dev container base image

[Copilot]

The base Ubuntu 24.04 image contained 3 HIGH severity CVEs in linux-libc-dev (6.8.0-85.85):

• CVE-2025-22036: kernel JFS slab-out-of-bounds
• CVE-2025-39735: kernel JFS slab-out-of-bounds in ea_get()
• CVE-2025-38666: kernel vulnerability (no upstream fix yet)

Changes

Added apt-get upgrade to Dockerfile to apply available security patches during image build:

RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
    && apt-get -y upgrade --no-install-recommends \
    && apt-get -y install --no-install-recommends \
        curl wget jq build-essential \
    && apt-get clean -y \
    && rm -rf /var/lib/apt/lists/*

Impact

• Upgrades linux-libc-dev to 6.8.0-87.88
• Fixes 2 of 3 HIGH severity CVEs (CVE-2025-38666 has no upstream fix)
• 67% reduction in HIGH severity vulnerabilities

Original prompt

Can you please help me with fixing the high-severity security issues here

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.