diff --git a/.gitlab-ci/setup-container.sh b/.gitlab-ci/setup-container.sh
index 4e487d27e31a..d2909c7257d3 100755
--- a/.gitlab-ci/setup-container.sh
+++ b/.gitlab-ci/setup-container.sh
@@ -94,14 +94,21 @@ archs=( amd64 )
 
 declare -A components
 
-# Install additional gcc versions On Debian bullseye (gcc 9) and trixie (gcc
-# 13).
+# Install additional packages on a per distribution version basis.
 case $FDO_DISTRIBUTION_VERSION in
 'bullseye')
+	# gcc 9 to expand compilation testing coverage.
 	PKGS_LIBCAMERA_RUNTIME+=( g++-9 )
 	;;
+'bookworm')
+	# libclang-rt-dev for the clang ASan runtime.
+	PKGS_LIBCAMERA_RUNTIME_MULTIARCH+=( libclang-rt-dev )
+	;;
 'trixie')
+	# gcc 13 to expand compilation testing coverage.
 	PKGS_LIBCAMERA_RUNTIME+=( g++-13 )
+	# libclang-rt-dev for the clang ASan runtime.
+	PKGS_LIBCAMERA_RUNTIME_MULTIARCH+=( libclang-rt-dev )
 	;;
 esac
 
diff --git a/gitlab-ci.yml b/gitlab-ci.yml
index 57e7cc69c74f..ea038ecb5921 100644
--- a/gitlab-ci.yml
+++ b/gitlab-ci.yml
@@ -13,6 +13,7 @@ variables:
   KERNEL_VERSION: '6.6'
   MESON_ALL_OPTIONS: >-
     -D android=enabled
+    -D b_sanitize=address
     -D cam=enabled
     -D documentation=enabled
     -D gstreamer=enabled
@@ -24,6 +25,9 @@ variables:
     -D tracing=enabled
     -D udev=enabled
     -D v4l2=true
+  # clang fails to link with ASan if --no-undefined is enabled.
+  MESON_CLANG_OPTIONS: >-
+    -D b_lundef=false
   PACKAGES: >-
     ca-certificates
     git
@@ -54,17 +58,17 @@ include:
 .libcamera-ci.debian:11:
   variables:
     FDO_DISTRIBUTION_VERSION: 'bullseye'
-    FDO_DISTRIBUTION_TAG: '2024-10-18.1'
+    FDO_DISTRIBUTION_TAG: '2024-11-05.1'
 
 .libcamera-ci.debian:12:
   variables:
     FDO_DISTRIBUTION_VERSION: 'bookworm'
-    FDO_DISTRIBUTION_TAG: '2024-10-18.1'
+    FDO_DISTRIBUTION_TAG: '2024-11-05.1'
 
 .libcamera-ci.debian:13:
   variables:
     FDO_DISTRIBUTION_VERSION: 'trixie'
-    FDO_DISTRIBUTION_TAG: '2024-10-18.2'
+    FDO_DISTRIBUTION_TAG: '2024-11-05.1'
 
 .container-debian:
   extends:
@@ -176,12 +180,19 @@ build-full:debian:12:
         BUILD_TYPE: release
         CC: gcc-12
         CXX: g++-12
+        # gcc 12.2.0 has a bug that triggers a false positive warning with ASan
+        # in release builds (see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105562).
+        # Disable the address sanitizer for now.
+        MESON_OPTIONS: >-
+          ${MESON_ALL_OPTIONS}
+          -D b_sanitize=none
       - ARCH: amd64
         BUILD_TYPE: debug
         CC: clang
         CXX: clang++
         MESON_OPTIONS: >-
           ${MESON_ALL_OPTIONS}
+          ${MESON_CLANG_OPTIONS}
           -D qcam=disabled
       - ARCH: amd64
         BUILD_TYPE: release
@@ -189,6 +200,7 @@ build-full:debian:12:
         CXX: clang++
         MESON_OPTIONS: >-
           ${MESON_ALL_OPTIONS}
+          ${MESON_CLANG_OPTIONS}
           -D qcam=disabled
       - ARCH: armhf
       - ARCH: arm64
@@ -375,6 +387,7 @@ test-unit:
   variables:
     BUILD_TYPE: debug
     MESON_OPTIONS: >-
+      -D b_sanitize=address
       -D cam=disabled
       -D documentation=disabled
       -D gstreamer=enabled