[nikolay]

One can always do apt-get update && apt-get upgrade && apt-clean (the last being a convenience command by TKLX) in their first RUN after FROM.