2021-02-16 patching

build/patch/2021-02-16/Dockerfile

@@ -0,0 +1,37 @@
+#-------------------------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See https://go.microsoft.com/fwlink/?linkid=2090316 for license information.
+#-------------------------------------------------------------------------------------------------------------
+
+ARG ORIGINAL_IMAGE=mcr.microsoft.com/vscode/devcontainers/javascript-node@sha256:204e54a530c14868112b2b533e9428b4737c6d6ae5304ae2b63248d33807f866
+FROM ${ORIGINAL_IMAGE}
+
+ARG PACKAGE_LIST="\
+libonig-dev \
+libonig4 \
+libonig4-dbg \
+dnsmasq \
+dnsmasq-base \
+dnsmasq-utils \
+tar \
+"
+
+# Script to iterate through the above list and update packages
+ARG PATCH_SCRIPT="\
+    export DEBIAN_FRONTEND=noninteractive \
+    && apt-get update \
+    && echo \"${PACKAGE_LIST}\" | tr ' ' '\n' | while read PKG; do \
+        echo \"(*) Checking \$PKG...\" \
+        && if [ \"\$PKG\" != '' ] && dpkg -s \$PKG >/dev/null 2>&1; then \
+            echo \"(*) Updating \$PKG...\" \
+            && apt-get install -yq --only-upgrade --no-install-recommends \$PKG; \
+        fi; \
+    done \
+    && apt-get autoremove -y && apt-get clean -y && rm -rf /var/lib/apt/lists/*"
+
+RUN echo "${PATCH_SCRIPT}" \
+    && if [ "$(id -u)" -ne 0 ]; then \
+        sudo bash -c "${PATCH_SCRIPT}"; \
+    else \
+        bash -c "${PATCH_SCRIPT}"; \
+    fi

build/patch/2021-02-16/README.md

@@ -0,0 +1,5 @@
+Updates older image versions to resolve the following
+
+- Debian Security Update for libonig (DLA 2431-2) https://lists.debian.org/debian-lts-announce/2021/01/msg00025.html
+- Ubuntu Security Notification for Dnsmasq Vulnerabilities (USN-4698-1) https://lists.ubuntu.com/archives/ubuntu-security-announce/2021-January/005845.html
+- Ubuntu Security Notification for Tar Vulnerabilities (USN-4692-1) https://lists.ubuntu.com/archives/ubuntu-security-announce/2021-January/005839.html

build/patch/2021-02-16/patch.json

@@ -0,0 +1,28 @@
+{
+	"dockerFile": "Dockerfile",
+	"bumpVersion": false,
+	"deleteUntaggedImages": true,
+	"imageIds": [
+		"sha256:803f8fa9d883da9d114adb47e33a698ba71f33c428e579796bd18293f52eabd7",
+		"sha256:4ebe4e9be05d3cf8630c3fe285820ba0e4fc19ba16ea4b6e4c71707cb154b2a9",
+		"sha256:acf506f94497d077c97a4d46e55abaf5b85a99f0588ab48de7b7122799003127",
+		"sha256:ce036e0f1f375142bc02b733b20fd05c5d5fefe4c6a8fffb8f2d9867cbb3d8be",
+		"sha256:67aba121fd465189ae5325da6e707a0ce31f9da248284f5df963670b277cab76",
+		"sha256:68db3263163430f98b054ba9448037c410dc83e414be60a9249021125aaba6d1",
+		"sha256:4de70ae4c85cbdc0c5d79883865b9ae164432b2e001e1531f88e4c98345927c9",
+		"sha256:73c5a9d8a8f28c1c0ec4d1d8b9f31dcfd1a07a5e8be06e55de2d7aa700b7ccdc",
+		"sha256:cf18bef446c5ce71c0b738fa987d6788cea8c4533beb287aece4a34858db7b54",
+		"sha256:cf658d6431e7bc7ef685fc79124649ba591080d88f26390e898a2074e94fca58",
+		"sha256:324efcc39136ed253cc3a57c5d79b226ca19843dc158a4254230fa623915026d",
+		"sha256:baa3ff5747ab028143a9e15670f8f0344710156c91bd67ec7bde4347b5952f66",
+		"sha256:009b2f6daa74307ef0e56570e385e06b34a2192d01d17551562a0843caaab57e",
+		"sha256:1a6cc15a71e87692eecf91d6001972bc41d1896ed29274bd0b07d232a702f871",
+		"sha256:63ffe3715a21bb0a6ed6c1ed62df5b3b1510f81139d8054c9e0d497c29a08007",
+		"sha256:3408ab82f6613a16661e9fe1ef8c2d866ce60730a478df5445306001a0b4d7b4",
+		"sha256:3269c1990f6ab93387b4f10d882d82ce6cc40ecf2e1d32e2d103d9f787622ba4",
+		"sha256:8a2eb87fc4ac5d5051feb87e1e2c9f5e4a92ea61c00a54698177cc91a0a58939",
+		"sha256:285ffb782366e407419925036c12053a78d78fd06c18d0021de82ce7dd23c6eb",
+		"sha256:204e54a530c14868112b2b533e9428b4737c6d6ae5304ae2b63248d33807f866",
+		"sha256:88c41607747def1ae75af529c64de0404a5587ab505a88b6507186ae16e4b917"
+	]
+}