diff --git a/docker/onadata-uwsgi/Dockerfile.ubuntu b/docker/onadata-uwsgi/Dockerfile.ubuntu
index a411b242ce..587ac1cf4b 100644
--- a/docker/onadata-uwsgi/Dockerfile.ubuntu
+++ b/docker/onadata-uwsgi/Dockerfile.ubuntu
@@ -28,7 +28,8 @@ RUN chown -R appuser:appuser /home/appuser/.pyenv
 USER appuser
 
 # hadolint ignore=DL3013
-RUN python -m pip install --no-cache-dir -U pip && \
+RUN python -m pip install --upgrade pip && \
+    python -m pip install --no-cache-dir -U pip && \
     python -m pip install --no-cache-dir -r requirements/base.pip && \
     python -m pip install --no-cache-dir -r requirements/s3.pip && \
     python -m pip install --no-cache-dir -r requirements/ses.pip && \
@@ -58,12 +59,12 @@ RUN python -m pip install --no-cache-dir -r requirements/docs.pip && \
     make -C docs html
 
 
-FROM debian:bookworm-20241202 as runtime
+FROM debian:bookworm-20250113 AS runtime
 
 ENV DEBIAN_FRONTEND=noninteractive
 
 # Install prerequisite packages
-RUN echo "deb http://deb.debian.org/debian unstable main non-free contrib" >> /etc/apt/sources.list \
+RUN echo "deb http://deb.debian.org/debian bookworm main non-free contrib" >> /etc/apt/sources.list \
     && apt-get update -q \
     && apt-get install -y --no-install-recommends locales netcat-traditional \
     && sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen \
diff --git a/requirements/azure.pip b/requirements/azure.pip
index d80c1eef3e..2a0f3fb211 100644
--- a/requirements/azure.pip
+++ b/requirements/azure.pip
@@ -22,7 +22,7 @@ cryptography==43.0.1
     # via
     #   -r requirements/azure.in
     #   azure-storage-blob
-django==4.2.17
+django==4.2.18
     # via
     #   -r requirements/azure.in
     #   django-storages
diff --git a/requirements/base.pip b/requirements/base.pip
index 4e04918e11..678a263c70 100644
--- a/requirements/base.pip
+++ b/requirements/base.pip
@@ -88,7 +88,7 @@ deprecated==1.2.14
     # via onadata
 dict2xml==1.7.5
     # via onadata
-django==4.2.17
+django==4.2.18
     # via
     #   django-activity-stream
     #   django-cors-headers
diff --git a/requirements/dev.pip b/requirements/dev.pip
index 1a59fb982c..00ea393891 100644
--- a/requirements/dev.pip
+++ b/requirements/dev.pip
@@ -104,7 +104,7 @@ dill==0.3.8
     # via pylint
 distlib==0.3.8
     # via virtualenv
-django==4.2.17
+django==4.2.18
     # via
     #   django-activity-stream
     #   django-cors-headers
diff --git a/requirements/s3.pip b/requirements/s3.pip
index 830bc7cec1..752e5eb399 100644
--- a/requirements/s3.pip
+++ b/requirements/s3.pip
@@ -12,7 +12,7 @@ botocore==1.34.134
     # via
     #   boto3
     #   s3transfer
-django==4.2.17
+django==4.2.18
     # via
     #   -r requirements/s3.in
     #   django-storages
diff --git a/requirements/ses.pip b/requirements/ses.pip
index 47ed5719f1..9068d49e78 100644
--- a/requirements/ses.pip
+++ b/requirements/ses.pip
@@ -14,7 +14,7 @@ botocore==1.34.134
     # via
     #   boto3
     #   s3transfer
-django==4.2.17
+django==4.2.18
     # via
     #   -r requirements/ses.in
     #   django-ses