diff --git a/Dockerfile b/Dockerfile
index 92e42646ce3c8012bcea129e7d8b8e528eb4fd6a..2e3bb719dec98fa89308293f27167bf44653253e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=redhat/openjdk/openjdk8-devel
 ARG BASE_TAG=1.8.0
 
-FROM jenkins/jenkins:2.289.2-centos as jenkins
+FROM jenkins/jenkins:2.289.3-centos as jenkins
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
@@ -24,7 +24,7 @@ ENV JENKINS_HOME $JENKINS_HOME
 ENV JENKINS_SLAVE_AGENT_PORT ${agent_port}
 ENV REF $REF
 
-COPY --from=jenkins /usr/bin/git-lfs /usr/bin/git-lfs
+COPY --from=jenkins /usr/local/bin/git-lfs /usr/local/bin/git-lfs
 
 # Jenkins is run with user `jenkins`, uid = 1000
 # If you bind mount a volume from the host or a data container,
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 2d4ce4d464914a9b8f9e590f4d73c350b00e039a..ae47038f7b35be2e288416b65b78bf942151769e 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "opensource/jenkins/jenkins"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "2.289.2"
+- "2.289.3"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -27,7 +27,7 @@ labels:
   org.opencontainers.image.url: "https://www.jenkins.io/"
   ## Name of the distributing entity, organization or individual
   org.opencontainers.image.vendor: "jenkins"
-  org.opencontainers.image.version: "2.289.2"
+  org.opencontainers.image.version: "2.289.3"
   ## Keywords to help with search (ex. "cicd,gitops,golang")
   mil.dso.ironbank.image.keywords: "cicd"
   ## This value can be "opensource" or "commercial"
@@ -37,8 +37,8 @@ labels:
 
 # List of resources to make available to the offline build context
 resources:
-- url: "docker://docker.io/jenkins/jenkins@sha256:a9cf9e95587179d843e1e9817ac2c1246c44935d5b8222b3a742114ffd88fc9a"
-  tag: "jenkins/jenkins:2.289.2-centos"
+- url: "docker://docker.io/jenkins/jenkins@sha256:e3b5c5547dec8068f89ef2a8c7615f038b52844ecc77a2cda4f9897bc42c3d9a"
+  tag: "jenkins/jenkins:2.289.3-centos"
 - filename: jenkins-plugin-manager.jar
   url: https://github.com/jenkinsci/plugin-installation-manager-tool/releases/download/2.10.0/jenkins-plugin-manager-2.10.0.jar
   validation: