Use explicit patchlevel in Dockerfile