diff --git a/Dockerfile-debug b/Dockerfile-debug
index 7efe0075e..bd5cea5ba 100644
--- a/Dockerfile-debug
+++ b/Dockerfile-debug
@@ -1,4 +1,4 @@
-FROM debian:buster-20200514-slim
+FROM debian:buster-20201117-slim
 RUN apt-get update && apt-get install -y --no-install-recommends \
     curl \
     dnsutils \
diff --git a/Dockerfile-proxy b/Dockerfile-proxy
index 871bacdf1..d6d7b04ce 100644
--- a/Dockerfile-proxy
+++ b/Dockerfile-proxy
@@ -1,4 +1,4 @@
-ARG RUNTIME_IMAGE=debian:buster-20200514-slim
+ARG RUNTIME_IMAGE=debian:buster-20201117-slim
 ARG BUILDPLATFORM=linux/amd64
 
 # Precompile key slow-to-build dependencies
diff --git a/cni-plugin/Dockerfile b/cni-plugin/Dockerfile
index f7922bb85..89dbe02e3 100644
--- a/cni-plugin/Dockerfile
+++ b/cni-plugin/Dockerfile
@@ -18,7 +18,7 @@ COPY cni-plugin cni-plugin
 ARG TARGETARCH
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH go build -o /go/bin/linkerd-cni -v -mod=readonly ./cni-plugin/
 
-FROM debian:buster-20200514-slim
+FROM debian:buster-20201117-slim
 WORKDIR /linkerd
 RUN apt-get update && apt-get install -y --no-install-recommends \
     iptables \
diff --git a/web/Dockerfile b/web/Dockerfile
index 04a691e9f..a58d4388b 100644
--- a/web/Dockerfile
+++ b/web/Dockerfile
@@ -43,7 +43,7 @@ ARG TARGETARCH
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH go build -mod=readonly -o web/web -ldflags "-s -w" ./web
 
 ## package it all up
-FROM debian:buster-20200514-slim
+FROM debian:buster-20201117-slim
 WORKDIR /linkerd
 
 COPY LICENSE .