chore: upgrade base image to fix CVE issue

[andyzhangx]

What type of PR is this?
/kind bug

What this PR does / why we need it:
chore: upgrade base image to fix CVE issue

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

# trivy --ignore-unfixed mcr.microsoft.com/k8s/csi/nfs-csi:latest
2021-05-12T10:41:52.693Z        INFO    Detecting Debian vulnerabilities...
2021-05-12T10:41:52.725Z        INFO    Detecting gobinary vulnerabilities...

mcr.microsoft.com/k8s/csi/nfs-csi:latest (debian 10.5)
======================================================
Total: 7 (UNKNOWN: 0, LOW: 0, MEDIUM: 5, HIGH: 2, CRITICAL: 0)

+---------------+------------------+----------+-------------------+----------------------+---------------------------------------+
|    LIBRARY    | VULNERABILITY ID | SEVERITY | INSTALLED VERSION |    FIXED VERSION     |                 TITLE                 |
+---------------+------------------+----------+-------------------+----------------------+---------------------------------------+
| apt           | CVE-2020-27350   | MEDIUM   | 1.8.2.1           | 1.8.2.2              | apt: integer overflows and underflows |
|               |                  |          |                   |                      | while parsing .deb packages           |
|               |                  |          |                   |                      | -->avd.aquasec.com/nvd/cve-2020-27350 |
+---------------+                  +          +                   +                      +                                       +
| libapt-pkg5.0 |                  |          |                   |                      |                                       |
|               |                  |          |                   |                      |                                       |
|               |                  |          |                   |                      |                                       |
+---------------+------------------+----------+-------------------+----------------------+---------------------------------------+
| libp11-kit0   | CVE-2020-29361   | HIGH     | 0.23.15-2         | 0.23.15-2+deb10u1    | p11-kit: integer overflow when        |
|               |                  |          |                   |                      | allocating memory for arrays          |
|               |                  |          |                   |                      | or attributes and object...           |
|               |                  |          |                   |                      | -->avd.aquasec.com/nvd/cve-2020-29361 |
+               +------------------+          +                   +                      +---------------------------------------+
|               | CVE-2020-29363   |          |                   |                      | p11-kit: out-of-bounds write in       |
|               |                  |          |                   |                      | p11_rpc_buffer_get_byte_array_value   |
|               |                  |          |                   |                      | function in rpc-message.c             |
|               |                  |          |                   |                      | -->avd.aquasec.com/nvd/cve-2020-29363 |
+               +------------------+----------+                   +                      +---------------------------------------+
|               | CVE-2020-29362   | MEDIUM   |                   |                      | p11-kit: out-of-bounds read in        |
|               |                  |          |                   |                      | p11_rpc_buffer_get_byte_array         |
|               |                  |          |                   |                      | function in rpc-message.c             |
|               |                  |          |                   |                      | -->avd.aquasec.com/nvd/cve-2020-29362 |
+---------------+------------------+          +-------------------+----------------------+---------------------------------------+
| libzstd1      | CVE-2021-24031   |          | 1.3.8+dfsg-3      | 1.3.8+dfsg-3+deb10u1 | zstd: adds read permissions           |
|               |                  |          |                   |                      | to files while being                  |
|               |                  |          |                   |                      | compressed or uncompressed            |
|               |                  |          |                   |                      | -->avd.aquasec.com/nvd/cve-2021-24031 |
+               +------------------+          +                   +----------------------+---------------------------------------+
|               | CVE-2021-24032   |          |                   | 1.3.8+dfsg-3+deb10u2 | zstd: Race condition                  |
|               |                  |          |                   |                      | allows attacker to access             |
|               |                  |          |                   |                      | world-readable destination file       |
|               |                  |          |                   |                      | -->avd.aquasec.com/nvd/cve-2021-24032 |
+---------------+------------------+----------+-------------------+----------------------+---------------------------------------+

nfsplugin
=========
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 0, CRITICAL: 0)

+------------------+------------------+----------+-------------------+-----------------------+---------------------------------------+
|     LIBRARY      | VULNERABILITY ID | SEVERITY | INSTALLED VERSION |     FIXED VERSION     |                 TITLE                 |
+------------------+------------------+----------+-------------------+-----------------------+---------------------------------------+
| k8s.io/client-go | CVE-2019-11250   | MEDIUM   | v0.20.0           | 1.15.4, 1.16.1-beta.0 | kubernetes: Bearer tokens             |
|                  |                  |          |                   |                       | written to logs at high               |
|                  |                  |          |                   |                       | verbosity levels (>= 7)...            |
|                  |                  |          |                   |                       | -->avd.aquasec.com/nvd/cve-2019-11250 |
+------------------+------------------+----------+-------------------+-----------------------+---------------------------------------+

Does this PR introduce a user-facing change?:

chore: upgrade base image to fix CVE issue

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: andyzhangx

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [andyzhangx]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coveralls]

Pull Request Test Coverage Report for Build 835166358

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 80.792%

---

Totals
Change from base Build 817069859:	0.0%
Covered Lines:	551
Relevant Lines:	682

---

💛 - Coveralls