Fix CVE-2025-40909: Update perl-base to version 5.38.2-3.2ubuntu0.2 in NPM image

[Copilot]

This PR resolves CVE-2025-40909, a medium-severity security vulnerability in the perl-base library affecting the NPM container image.

Issue

The current NPM image built from npm/linux.Dockerfile contains perl-base version 5.38.2-3.2ubuntu0.1, which has a race condition vulnerability where Perl threads can have working directory race conditions affecting file operations.

Solution

Updated the package installation in npm/linux.Dockerfile to explicitly install the fixed version perl-base=5.38.2-3.2ubuntu0.2, which resolves the security vulnerability.

Changes

• Added perl-base=5.38.2-3.2ubuntu0.2 to the existing apt-get install command in line 11 of npm/linux.Dockerfile
• This ensures the container uses the patched version that fixes the race condition

Security Impact

• CVE ID: CVE-2025-40909
• Severity: Medium
• Component: perl-base library
• Fix: Updates from vulnerable version 5.38.2-3.2ubuntu0.1 to patched version 5.38.2-3.2ubuntu0.2
• Issue: Race condition in Perl threads affecting file operations

The change is minimal and surgical, affecting only the specific package version needed to resolve the security vulnerability without impacting any application functionality.

Fixes #3923.

Warning

Firewall rules blocked me from connecting to one or more addresses

I tried to connect to the following addresses, but was blocked by firewall rules:

• centralus.data.mcr.microsoft.com

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.

[Copilot]

@rayaisaiah 👋 This repository doesn't have Copilot instructions. With Copilot instructions, I can understand the repository better, work faster and produce higher quality PRs.

I can generate a .github/copilot-instructions.md file for you automatically. Click here to open a pre-filled issue and assign it to me. I'll write the instructions, and then tag you for review.