chore: update to debian-base v1.7.2 and update packages to fix CVEs

[aramase]

Signed-off-by: Anish Ramasekar anish.ramasekar@gmail.com

What this PR does / why we need it:

• Updates to debian-base v1.7.2
• Updates packages to fix CVE's

+-------------+------------------+----------+-------------------+-----------------+--------------------------------+------------------------------------+
|   LIBRARY   | VULNERABILITY ID | SEVERITY | INSTALLED VERSION |  FIXED VERSION  |             TITLE              |                URL                 |
+-------------+------------------+----------+-------------------+-----------------+--------------------------------+------------------------------------+
| libgcrypt20 | CVE-2021-33560   | HIGH     | 1.8.4-5           | 1.8.4-5+deb10u1 | libgcrypt: mishandles ElGamal  | avd.aquasec.com/nvd/cve-2021-33560 |
|             |                  |          |                   |                 | encryption because it lacks    |                                    |
|             |                  |          |                   |                 | exponent blinding to address   |                                    |
|             |                  |          |                   |                 | a...                           |                                    |
+-------------+------------------+----------+-------------------+-----------------+--------------------------------+------------------------------------+
| libgnutls30 | CVE-2021-20231   | CRITICAL | 3.6.7-4+deb10u6   | 3.6.7-4+deb10u7 | gnutls: Use after free in      | avd.aquasec.com/nvd/cve-2021-20231 |
|             |                  |          |                   |                 | client key_share extension     |                                    |
+             +------------------+          +                   +                 +--------------------------------+------------------------------------+
|             | CVE-2021-20232   |          |                   |                 | gnutls: Use after free         | avd.aquasec.com/nvd/cve-2021-20232 |
|             |                  |          |                   |                 | in client_send_params in       |                                    |
|             |                  |          |                   |                 | lib/ext/pre_shared_key.c       |                                    |
+             +------------------+----------+                   +                 +--------------------------------+------------------------------------+
|             | CVE-2020-24659   | HIGH     |                   |                 | gnutls: Heap buffer            | avd.aquasec.com/nvd/cve-2020-24659 |
|             |                  |          |                   |                 | overflow in handshake with     |                                    |
|             |                  |          |                   |                 | no_renegotiation alert sent    |                                    |
+-------------+------------------+          +-------------------+-----------------+--------------------------------+------------------------------------+
| libhogweed4 | CVE-2021-20305   |          | 3.4.1-1           | 3.4.1-1+deb10u1 | nettle: Out of bounds          | avd.aquasec.com/nvd/cve-2021-20305 |
|             |                  |          |                   |                 | memory access in signature     |                                    |
|             |                  |          |                   |                 | verification                   |                                    |
+             +------------------+----------+                   +                 +--------------------------------+------------------------------------+
|             | CVE-2021-3580    | MEDIUM   |                   |                 | nettle: Remote crash in RSA    | avd.aquasec.com/nvd/cve-2021-3580  |
|             |                  |          |                   |                 | decryption via manipulated     |                                    |
|             |                  |          |                   |                 | ciphertext                     |                                    |
+-------------+------------------+----------+                   +                 +--------------------------------+------------------------------------+
| libnettle6  | CVE-2021-20305   | HIGH     |                   |                 | nettle: Out of bounds          | avd.aquasec.com/nvd/cve-2021-20305 |
|             |                  |          |                   |                 | memory access in signature     |                                    |
|             |                  |          |                   |                 | verification                   |                                    |
+             +------------------+----------+                   +                 +--------------------------------+------------------------------------+
|             | CVE-2021-3580    | MEDIUM   |                   |                 | nettle: Remote crash in RSA    | avd.aquasec.com/nvd/cve-2021-3580  |
|             |                  |          |                   |                 | decryption via manipulated     |                                    |
|             |                  |          |                   |                 | ciphertext                     |                                    |
+-------------+------------------+----------+-------------------+-----------------+--------------------------------+------------------------------------+

Periodic image scan job failure: https://storage.googleapis.com/kubernetes-jenkins/logs/periodic-secrets-store-csi-driver-image-scan/1407136883334451200/build-log.txt

Which issue(s) this PR fixes (optional, using fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when the PR gets merged):
Fixes #

Special notes for your reviewer:

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: aramase

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [aramase]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[tam7t]

/lgtm