diff --git a/image/postgres/konflux.Dockerfile b/image/postgres/konflux.Dockerfile
index 4590a1813c71d..ab687520d6531 100644
--- a/image/postgres/konflux.Dockerfile
+++ b/image/postgres/konflux.Dockerfile
@@ -1,5 +1,5 @@
 ARG PG_VERSION=15
-FROM registry.redhat.io/rhel8/postgresql-${PG_VERSION}:latest@sha256:5730444326464f2ed87279cc8f6369c056e59868701f1affa17e4689ebd8591f AS final
+FROM registry.redhat.io/rhel8/postgresql-${PG_VERSION}:latest@sha256:6361cc5d749c2781932d8c188c2742e576547271f5fe60afe1fcd3341e323dcd AS final
 
 USER root
 
diff --git a/image/rhel/konflux.Dockerfile b/image/rhel/konflux.Dockerfile
index 49b63320768f1..73f6e2da4393d 100644
--- a/image/rhel/konflux.Dockerfile
+++ b/image/rhel/konflux.Dockerfile
@@ -37,7 +37,7 @@ RUN mkdir -p image/rhel/docs/api/v1 && \
 RUN make copy-go-binaries-to-image-dir
 
 
-FROM registry.access.redhat.com/ubi9/nodejs-20:latest@sha256:578c10c98c23298c604dc1bab5e42c053f148b627d4548aba220c1a301c40a2a AS ui-builder
+FROM registry.access.redhat.com/ubi9/nodejs-20:latest@sha256:89d87dcea82da3a550a467a72a86d79df45147c03d8ad743a56100738b6a42f4 AS ui-builder
 
 WORKDIR /go/src/github.com/stackrox/rox/app
 
diff --git a/scanner/image/db/konflux.Dockerfile b/scanner/image/db/konflux.Dockerfile
index 3cee96f75af17..7af3413a18991 100644
--- a/scanner/image/db/konflux.Dockerfile
+++ b/scanner/image/db/konflux.Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.redhat.io/rhel8/postgresql-15:latest@sha256:5730444326464f2ed87279cc8f6369c056e59868701f1affa17e4689ebd8591f
+FROM registry.redhat.io/rhel8/postgresql-15:latest@sha256:6361cc5d749c2781932d8c188c2742e576547271f5fe60afe1fcd3341e323dcd
 
 ARG BUILD_TAG
 RUN if [[ "$BUILD_TAG" == "" ]]; then >&2 echo "error: required BUILD_TAG arg is unset"; exit 6; fi