Update Ubuntu base from AWS ECR
Use the latest published Ubuntu image from AWS ECR (serial 20220404) as base image. The latest image has packages patched for CVE-2018-25032 and CVE-2022-0778. Canonical has direct control over images published to AWS ECR as opposed to Docker Hub official images which has to go through PR to https://github.com/docker-library/official-images/.