diff --git a/Containerfile b/Containerfile
index a21e6f3..42d1bd4 100644
--- a/Containerfile
+++ b/Containerfile
@@ -1,6 +1,11 @@
 ARG SOURCE_SET_DIGEST=unknown
 
-FROM docker.io/nginxinc/nginx-unprivileged@sha256:65e3e85dbaed8ba248841d9d58a899b6197106c23cb0ff1a132b7bfe0547e4c0 AS runtime-base
+FROM docker.io/nginxinc/nginx-unprivileged@sha256:15c994d10d6d78658721c3bcafff14cb281fba2a4bdf9d5ba92c416a472516e3 AS runtime-base
+
+# Preserve the full upstream module set while applying fixed Alpine packages.
+USER root
+RUN apk add --no-cache --upgrade tiff=4.7.2-r0 zlib=1.3.2-r1
+USER 101:101
 
 ARG VCS_REVISION=unknown
 ARG SOURCE_SET_DIGEST