diff --git a/test/Dockerfile.distro b/test/Dockerfile.distro
index 293039363..2b3f3d28d 100644
--- a/test/Dockerfile.distro
+++ b/test/Dockerfile.distro
@@ -170,7 +170,7 @@ RUN install-tool composer 2.8.5
 FROM build AS test-python
 
 # renovate: datasource=github-releases packageName=containerbase/python-prebuild
-RUN install-tool python 3.12.8
+RUN install-tool python 3.12.9
 
 # renovate: datasource=pypi
 RUN install-tool checkov 3.2.360
diff --git a/test/latest/Dockerfile b/test/latest/Dockerfile
index 603d0b93c..365aa61ce 100644
--- a/test/latest/Dockerfile
+++ b/test/latest/Dockerfile
@@ -75,7 +75,7 @@ RUN set -ex; [ $(stat --format '%u' "/usr/local/bin/php") -eq ${USER_ID} ]
 RUN install-tool powershell v7.5.0
 
 # renovate: datasource=github-releases depName=python packageName=containerbase/python-prebuild
-ARG PYTHON_VERSION=3.12.8
+ARG PYTHON_VERSION=3.12.9
 RUN install-tool python
 RUN set -ex; [ $(stat --format '%u' "/usr/local/bin/python") -eq ${USER_ID} ]
 
diff --git a/test/python/Dockerfile b/test/python/Dockerfile
index cfca42d93..eea534b20 100644
--- a/test/python/Dockerfile
+++ b/test/python/Dockerfile
@@ -41,7 +41,7 @@ FROM base AS build
 
 # Python
 # renovate: datasource=github-releases packageName=containerbase/python-prebuild
-RUN install-tool python 3.12.8
+RUN install-tool python 3.12.9
 
 #--------------------------------------
 # build-rootless
@@ -53,7 +53,7 @@ RUN prepare-tool python conan
 USER 12021
 
 # renovate: datasource=github-releases packageName=containerbase/python-prebuild
-RUN install-tool python 3.12.8
+RUN install-tool python 3.12.9
 
 #--------------------------------------
 # build: pipenv
@@ -107,7 +107,7 @@ FROM build-rootless AS test-poetry-a
 
 # try install again, sould skip
 # renovate: datasource=github-releases packageName=containerbase/python-prebuild
-RUN install-tool python 3.12.8
+RUN install-tool python 3.12.9
 
 # renovate: datasource=pypi
 RUN install-tool poetry 1.8.5
@@ -197,7 +197,7 @@ RUN install-tool python 3.8.13
 
 # make as latest
 # renovate: datasource=github-releases packageName=containerbase/python-prebuild
-RUN install-tool python 3.12.8
+RUN install-tool python 3.12.9
 
 # renovate: datasource=pypi
 RUN install-tool pipenv 2024.4.1
diff --git a/test/python/Dockerfile.arm64 b/test/python/Dockerfile.arm64
index 46b15dab0..7f03ac7d1 100644
--- a/test/python/Dockerfile.arm64
+++ b/test/python/Dockerfile.arm64
@@ -38,7 +38,7 @@ ARG CONTAINERBASE_LOG_LEVEL
 FROM base AS test-python
 
 # renovate: datasource=github-releases packageName=containerbase/python-prebuild
-RUN install-tool python 3.12.8
+RUN install-tool python 3.12.9
 
 #--------------------------------------
 # Image: checkov