[Snyk] Security upgrade ubuntu from 22.10 to lunar-20230615

[glenn-jocher]

This PR was automatically created by Snyk using the credentials of a real user.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

• utils/docker/Dockerfile-cpu

We recommend upgrading to ubuntu:lunar-20230615, as this image has only 7 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

Severity	Priority Score / 1000	Issue	Exploit Maturity
	300	Improper Validation of Integrity Check Value SNYK-UBUNTU2210-SYSTEMD-5721329	No Known Exploit
	300	Improper Validation of Integrity Check Value SNYK-UBUNTU2210-SYSTEMD-5721343	No Known Exploit
	300	Improper Validation of Integrity Check Value SNYK-UBUNTU2210-SYSTEMD-5721343	No Known Exploit
	300	Improper Validation of Integrity Check Value SNYK-UBUNTU2210-SYSTEMD-5721350	No Known Exploit
	300	Improper Validation of Integrity Check Value SNYK-UBUNTU2210-SYSTEMD-5721350	No Known Exploit

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

🛠️ PR Summary

_{Made with ❤️ by Ultralytics Actions}

🌟 Summary

Updated Dockerfile for improved compatibility and package management in YOLOv5 CPU Docker image.

📊 Key Changes

• Changed the base Ubuntu image from 22.10 to a specific lunar-20230615 snapshot.
• Added g++ and libusb-1.0-0 to the list of packages installed via apt to support building certain Python packages.
• Removed the file /usr/lib/python3.11/EXTERNALLY-MANAGED to prevent issues with Ubuntu's nightly build process when using pip install.
• Simplified package installation commands by combining them into fewer RUN instructions.

🎯 Purpose & Impact

• 🚀 Ensuring the Docker image is based on a stable snapshot of Ubuntu Lunar for consistent builds and avoiding potential issues with the latest rolling updates.
• 🛠 Supporting the building and installation of Python packages (tflite_support and lap) that require additional C++ libraries and USB support.
• 🐍 Resolving conflicts with Python's packaging system in the Ubuntu nightlies that could cause errors during package installation.
• 🧹 Streamlining the Dockerfile for efficiency and reduced complexity, which can lead to faster build times and easier maintenance.

Potential impact to users:

These changes are likely to improve the stability and functionality of the YOLOv5 CPU Docker image, leading to a smoother experience for developers deploying YOLOv5 on CPU-only environments.