diff --git a/Dockerfile b/Dockerfile
index 57eda65b99541befbbf6377869f2884b4c88ba30..0900b78dba205e5f1a892a96411f6a995df1ec79 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,7 +11,7 @@
 
 ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/redhat/ubi/ubi8
-ARG BASE_TAG=8.5
+ARG BASE_TAG=8.7
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} AS builder
 
@@ -23,7 +23,7 @@ RUN chmod 0555 /bin/tini
 RUN mkdir /usr/share/elasticsearch
 WORKDIR /usr/share/elasticsearch
 
-COPY elasticsearch-7.17.6-linux-x86_64.tar.gz /tmp/elasticsearch.tar.gz
+COPY elasticsearch-7.17.8-linux-x86_64.tar.gz /tmp/elasticsearch.tar.gz
 
 RUN tar -zxf /tmp/elasticsearch.tar.gz --strip-components=1
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index a12acf123b1be852c57a54aa313cc9ee43c1b79b..8cbed72906d9b947612c225737d17fd916e4dd24 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 args:
   BASE_IMAGE: redhat/ubi/ubi8
-  BASE_TAG: '8.6'
+  BASE_TAG: '8.7'
 labels:
   mil.dso.ironbank.image.keywords: search,elastic,elasticsearch,java
   mil.dso.ironbank.image.type: commercial
@@ -11,7 +11,7 @@ labels:
   org.opencontainers.image.title: elasticsearch
   org.opencontainers.image.url: https://github.com/elastic/elasticsearch
   org.opencontainers.image.vendor: Elastic
-  org.opencontainers.image.version: 7.17.6
+  org.opencontainers.image.version: 7.17.8
 maintainers:
 - email: rory.hunter@elastic.co
   name: Rory Hunter
@@ -26,16 +26,16 @@ maintainers:
   username: yalabe.dukuly
 name: elastic/elasticsearch/elasticsearch
 resources:
-- filename: elasticsearch-7.17.6-linux-x86_64.tar.gz
-  url: https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.17.6-linux-x86_64.tar.gz
+- filename: elasticsearch-7.17.8-linux-x86_64.tar.gz
+  url: https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.17.8-linux-x86_64.tar.gz
   validation:
     type: sha512
-    value: ecb263e2a85fc0f1dacde53567effc1579052e565822ffa231a280fa494ee031cf82610b2916917800c4a776c49e6540ca2ed018d0d4bb5a3453bbe2e914c503
+    value: cd02b40e8b32e78f17bac12245326e10482214ab452b2e5d1745ddc7944e60a5b07c01c949c68625d78640bdd46806aeece4e8d620788133993055732d388443
 - filename: tini
   url: https://github.com/krallin/tini/releases/download/v0.19.0/tini-amd64
   validation:
     type: sha256
     value: 93dcc18adc78c65a028a84799ecf8ad40c936fdfc5f2a57b1acda5a8117fa82c
 tags:
-- 7.17.6
+- 7.17.8
 - latest