diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh
index d80e1b88d60..2cb6bb6bdb6 100644
--- a/Dockerfile.clients.rh
+++ b/Dockerfile.clients.rh
@@ -7,7 +7,7 @@ FROM quay.io/securesign/fetch-tsa-certs@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd
 
 # Provides the Trusted Artifact Signer CLI binaries, rekor-cli and ec
 FROM quay.io/securesign/rekor-cli@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15 as rekor
-FROM registry.redhat.io/rhtas/ec-rhel9:0.8-1784063491@sha256:a16f2e7ac6bd48c0abf98c07d1004d8bc7f97114dc9e7d51d9cd8fb26fb43763 as ec
+FROM registry.redhat.io/rhtas/ec-rhel9:0.8-1785845370@sha256:e5951c8089e639cc315058cc46d3cde2b98a4683842b6f67df0b2b44251a1030 as ec
 
 # Provides the Trusted Artifact Signer CLI binaries trillian-createtree and trillian-updatetree
 FROM quay.io/securesign/trillian-createtree@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca as trillian-createtree
@@ -15,7 +15,7 @@ FROM quay.io/securesign/trillian-updatetree@sha256:dfae5377710f369844bc6502a6b10
 
 FROM quay.io/securesign/cli-tuftool@sha256:192b05958eabbc89d9e29d43ad0f9ceabea72377a4883c7b3652c99ca1cbea8a as tuf-tool
 
-FROM registry.redhat.io/ubi9/httpd-24@sha256:66b14ae828342819823fe01bc93117b54ce3999eaee8bc608de0be7459abc65b
+FROM registry.redhat.io/ubi9/httpd-24@sha256:8a3ced6d60108c5bc1095c67051dcef2c29f19426ece3ad73378edc651ee21f7
 ENV APP_ROOT=/opt/app-root
 WORKDIR $APP_ROOT/src/
 
diff --git a/Dockerfile.cosign.rh b/Dockerfile.cosign.rh
index 43c90e4836d..bf5a14a7771 100644
--- a/Dockerfile.cosign.rh
+++ b/Dockerfile.cosign.rh
@@ -1,6 +1,6 @@
 # Build stage
 
-FROM registry.redhat.io/ubi9/go-toolset:9.8-1784190466@sha256:f99dd81b20e5971ef9f63a51ac27cf0aa591ff9921d021490548b67fd9b17144 AS build-env
+FROM registry.redhat.io/ubi9/go-toolset:9.8-1786023237@sha256:5d26ff5606bd6590930e7cfc202b510e3fe2c7a7a1720860f444ab49c45128cb AS build-env
 
 ENV GOEXPERIMENT=strictfipsruntime
 ENV CGO_ENABLED=1
@@ -26,7 +26,7 @@ RUN git config --global --add safe.directory /cosign && \
     git update-index --no-assume-unchanged Dockerfile.cosign.rh
 
 # Install Cosign
-FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:932acc913841596b4bdb1dfb6280987b81c2d9f4d337d0a57c9a98fc749e10bd
+FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:31648959f2cf4e3fdd14801905e4339fef1d4457763e80094ed30f69562f0a63
 
 LABEL description="Cosign is a container signing tool that leverages simple, secure, and auditable signatures based on simple primitives and best practices."
 LABEL io.k8s.description="Cosign is a container signing tool that leverages simple, secure, and auditable signatures based on simple primitives and best practices."