diff --git a/msk-debug-container/Dockerfile b/msk-debug-container/Dockerfile
index 7c90580..f63aa14 100644
--- a/msk-debug-container/Dockerfile
+++ b/msk-debug-container/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/openjdk-21@sha256:1245421ae51c94ffe6e44e7d0439b51cf2653929ecee59d881d92c09b543b52a
+FROM registry.access.redhat.com/ubi9/openjdk-21@sha256:b0e49a2af4bc8214f7e6438ec54c9dd8ecc0765fccb4501ec881ed0a07d59fa7
 ARG KAFKA_VERSION
 ARG KAFKA_VERSION_PATCH
 
diff --git a/qontract-reconcile-base/Dockerfile b/qontract-reconcile-base/Dockerfile
index b7b6fdf..a4a5220 100644
--- a/qontract-reconcile-base/Dockerfile
+++ b/qontract-reconcile-base/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/ubi:9.5@sha256:2bae9062eddbbc18e76555972e7026ffe02cef560a0076e6d7f72bed2c05723f AS downloader
+FROM registry.access.redhat.com/ubi9/ubi:9.5@sha256:38791b293262ac2169eca2717e68e626a047d2b89fbd1da544db24ed0204efeb AS downloader
 
 RUN dnf -y install unzip glibc-langpack-en
 
@@ -88,7 +88,7 @@ RUN curl -sfL https://github.com/prometheus/alertmanager/releases/download/v${AL
     | tar -zxf - -C /usr/local/bin --strip-components=1 alertmanager-${ALERTMANAGER_VERSION}.linux-amd64/amtool
 
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5@sha256:d85040b6e3ed3628a89683f51a38c709185efc3fb552db2ad1b9180f2a6c38be
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5@sha256:daa61d6103e98bccf40d7a69a0d4f8786ec390e2204fd94f7cc49053e9949360
 
 ENV TF_PLUGIN_LOCAL_DIR=/usr/local/share/terraform/
 ENV TF_PLUGIN_CACHE_DIR=/.terraform.d/plugin-cache/