diff --git a/Dockerfile b/Dockerfile
index 7ab597327767287df1ad54d72963e7bdf1a02a3a..6f0601e4e4a3cb6d7d92958153c27909c8774ccc 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 ARG CP_BASE_NEW_IMAGE=confluentinc/cp-base-new
-ARG CP_BASE_NEW_TAG=7.8.1-2-ubi8
+ARG CP_BASE_NEW_TAG=7.9.0-1-ubi8
 
 ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=redhat/openjdk/openjdk17
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 3f0fc4540b382e8b10de916f5c63e435f7dcb008..52910cb0b22438a00d058678cef8d48018702ec4 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -7,10 +7,10 @@ name: "confluentinc/cp-base-new"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dso.mil
 tags:
-  - "Q4_2024_jdk17"
-  - "2025-02-13"
-  - "7.8.1"
-  - "7.8.1-2-ubi8"
+  - "Q1_2025_jdk17"
+  - "2025-02-24"
+  - "7.9.0"
+  - "7.9.0-1-ubi8"
   - "latest-ubi8.amd64"
   - "latest.amd64"
   - "latest_jdk17"
@@ -19,7 +19,7 @@ tags:
 # Build args passed to Dockerfile ARGs
 args:
   CP_BASE_NEW_IMAGE: "confluentinc/cp-base-new"
-  CP_BASE_NEW_TAG: "7.8.1-2-ubi8"
+  CP_BASE_NEW_TAG: "7.9.0-1-ubi8"
   BASE_IMAGE: "redhat/openjdk/openjdk17"
   BASE_TAG: "1.17"
 
@@ -30,16 +30,16 @@ labels:
   org.opencontainers.image.licenses: "CONFLUENT ENTERPRISE LICENSE"
   org.opencontainers.image.url: "https://docs.confluent.io/platform/current/overview.html"
   org.opencontainers.image.vendor: "Confluent"
-  org.opencontainers.image.version: "Q4_2024_jdk17"
+  org.opencontainers.image.version: "Q1_2025_jdk17"
   mil.dso.ironbank.image.keywords: "confluent,cflt,kafka,operator,cfk"
   mil.dso.ironbank.image.type: "commercial"
   mil.dso.ironbank.product.name: "Confluent Platform"
 # List of resources to make available to the offline build context
 resources:
-  - url: "docker://docker.io/confluentinc/cp-base-new@sha256:7ee5bc2d851f8a5def0465502eb32fe41a9294b77ef78590802634e9fef4e5de"
-    tag: "confluentinc/cp-base-new:7.8.1-2-ubi8"
+  - url: "docker://docker.io/confluentinc/cp-base-new@sha256:bd0ef13663558ea378e12301d9e3ad334684aecc9871754415e155098023ce18"
+    tag: "confluentinc/cp-base-new:7.9.0-1-ubi8"
   - filename: archive.key
-    url: https://packages.confluent.io/rpm/7.8/archive.key
+    url: https://packages.confluent.io/rpm/7.9/archive.key
     validation:
       type: sha256
       value: b569e9d80bc08b65d342491f8b94e47eb7032701ce17b091f212e1072672a4d5