new base image, with latest security patches