diff --git a/build/deploy/Dockerfile b/build/deploy/Dockerfile
index 34b067fd2698..b50ff609b48e 100644
--- a/build/deploy/Dockerfile
+++ b/build/deploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM debian:9.8-slim
+FROM debian:9.12-slim
 
 # For deployment, we need
 # libc6 - dynamically linked by cockroach binary