diff --git a/build/deploy/Dockerfile b/build/deploy/Dockerfile
index fd10013d8cf7..64c7db8c4948 100644
--- a/build/deploy/Dockerfile
+++ b/build/deploy/Dockerfile
@@ -1,4 +1,4 @@
-FROM debian:9.8-slim
+FROM debian:9.12-slim
 
 # For deployment, we need
 # libc6 - dynamically linked by cockroach binary