diff --git a/build-tools/build-docker-images/stx-debian/Dockerfile.stable b/build-tools/build-docker-images/stx-debian/Dockerfile.stable
index ee47efee..6a1669a4 100644
--- a/build-tools/build-docker-images/stx-debian/Dockerfile.stable
+++ b/build-tools/build-docker-images/stx-debian/Dockerfile.stable
@@ -1,7 +1,7 @@
 # Expected build arguments:
 #   RELEASE: debian release
 #
-ARG RELEASE=bullseye-20220228
+ARG RELEASE=11.3
 FROM debian:${RELEASE}
 
 ENV DEBIAN_FRONTEND=noninteractive
@@ -39,6 +39,21 @@ RUN cp -f /etc/apt/sources.list.d/stx.list.disabled /etc/apt/sources.list.d/stx.
         python3-pip \
         python3-wheel \
         libapache2-mod-wsgi-py3 \
-        && \
-    apt-get clean && \
+        ;
+
+# FIXME: these packages are not required by most docker images inheriting
+# from this image. However these Python modules are not buildable from
+# source (ie by pip) on Debian and require patches. Install the patched
+# versions as DEB packages to make sure pip dependencies in derived images
+# are satisfied.
+#
+# A better solution would be to omit them here, but install them in each
+# project that requires them; or add wheel subpackages to these DEBs.
+RUN apt-get install -y \
+    python3-thriftpy \
+    python3-nss \
+    python-nss
+
+# Delete apt cache
+RUN apt-get clean && \
     rm -rf /var/lib/apt/lists/*