security: fix CVE-2021-43618

[aramase]

Signed-off-by: Anish Ramasekar anish.ramasekar@gmail.com

What this PR does / why we need it:

➜ trivy --exit-code 1 --ignore-unfixed --severity MEDIUM,HIGH,CRITICAL k8s.gcr.io/build-image/debian-base:bullseye-v1.1.0
2022-01-04T13:40:52.026-0800	WARN	The root command will be removed. Please migrate to 'trivy image' command. See https://github.com/aquasecurity/trivy/discussions/1515
2022-01-04T13:40:52.073-0800	INFO	Need to update DB
2022-01-04T13:40:52.073-0800	INFO	Downloading DB...
25.32 MiB / 25.32 MiB [-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------] 100.00% 24.18 MiB p/s 1s
2022-01-04T13:40:57.118-0800	INFO	Detected OS: debian
2022-01-04T13:40:57.118-0800	INFO	Detecting Debian vulnerabilities...
2022-01-04T13:40:57.128-0800	INFO	Number of language-specific files: 0

k8s.gcr.io/build-image/debian-base:bullseye-v1.1.0 (debian 11.1)
================================================================
Total: 1 (MEDIUM: 0, HIGH: 1, CRITICAL: 0)

+----------+------------------+----------+-------------------+------------------------+---------------------------------------+
| LIBRARY  | VULNERABILITY ID | SEVERITY | INSTALLED VERSION |     FIXED VERSION      |                 TITLE                 |
+----------+------------------+----------+-------------------+------------------------+---------------------------------------+
| libgmp10 | CVE-2021-43618   | HIGH     | 2:6.2.1+dfsg-1    | 2:6.2.1+dfsg-1+deb11u1 | gmp: Integer overflow and resultant   |
|          |                  |          |                   |                        | buffer overflow via crafted input     |
|          |                  |          |                   |                        | -->avd.aquasec.com/nvd/cve-2021-43618 |
+----------+------------------+----------+-------------------+------------------------+---------------------------------------+

Which issue(s) this PR fixes (optional, using fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when the PR gets merged):
Fixes #

Special notes for your reviewer:

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: aramase

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [aramase]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[tam7t]

/lgtm