diff --git a/Dockerfile.coverage b/Dockerfile.coverage
index 2b6b17ef6..a9b40b2d1 100644
--- a/Dockerfile.coverage
+++ b/Dockerfile.coverage
@@ -15,7 +15,7 @@ RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} \
     go build -cover -covermode=atomic -tags=coverage \
     -a -o policy-controller ./cmd/webhook
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:062c52ff973065752b0965787649db2bcf551a6c727a00e95a3eb42cebadbdab
+FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:48fa5d8cda7fc00d270d8747c3eaa54ae196f0820d8540074a9c8c61d5e3056f
 WORKDIR /
 COPY --from=builder /workspace/policy-controller .
 USER 65532:65532
diff --git a/Dockerfile.rh b/Dockerfile.rh
index 20b91fc66..8f04b26bf 100644
--- a/Dockerfile.rh
+++ b/Dockerfile.rh
@@ -1,5 +1,5 @@
 ## Build stage
-FROM registry.redhat.io/ubi9/go-toolset:latest@sha256:ad9d042375cef55890db3378ced9d0cebd74656bc8dc4c3b0cdbea31b85ce459 AS build-env
+FROM registry.redhat.io/ubi9/go-toolset:latest@sha256:4894a8eabc8bd22de569090ef9c3da7c10dce981f03f8bfd6a9b129d37445048 AS build-env
 WORKDIR /opt/app-root/src/
 USER root
 ENV GOEXPERIMENT=strictfipsruntime
@@ -17,7 +17,7 @@ RUN CGO_ENABLED=1 go build -mod=mod \
     -o ./policy-controller ./cmd/webhook
 
 # Install stage
-FROM registry.access.redhat.com/ubi9/ubi-minimal:latest@sha256:062c52ff973065752b0965787649db2bcf551a6c727a00e95a3eb42cebadbdab
+FROM registry.access.redhat.com/ubi9/ubi-minimal:latest@sha256:48fa5d8cda7fc00d270d8747c3eaa54ae196f0820d8540074a9c8c61d5e3056f
 COPY --from=build-env /opt/app-root/src/policy-controller /usr/local/bin/policy-controller
 WORKDIR /opt/app-root/src/home
 COPY LICENSE /licenses/LICENSE