diff --git a/Dockerfile b/Dockerfile
index 92e42646ce3c8012bcea129e7d8b8e528eb4fd6a..ac1ed89ff4cfa4963f3d570755169de164585fd5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=redhat/openjdk/openjdk8-devel
 ARG BASE_TAG=1.8.0
 
-FROM jenkins/jenkins:2.289.2-centos as jenkins
+FROM jenkins/jenkins:2.289.3-centos as jenkins
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 2d4ce4d464914a9b8f9e590f4d73c350b00e039a..d475dd475f7023e46970c8160902acf4f95474da 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "opensource/jenkins/jenkins"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "2.289.2"
+- "2.289.3"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -27,7 +27,7 @@ labels:
   org.opencontainers.image.url: "https://www.jenkins.io/"
   ## Name of the distributing entity, organization or individual
   org.opencontainers.image.vendor: "jenkins"
-  org.opencontainers.image.version: "2.289.2"
+  org.opencontainers.image.version: "2.289.3"
   ## Keywords to help with search (ex. "cicd,gitops,golang")
   mil.dso.ironbank.image.keywords: "cicd"
   ## This value can be "opensource" or "commercial"
@@ -37,8 +37,8 @@ labels:
 
 # List of resources to make available to the offline build context
 resources:
-- url: "docker://docker.io/jenkins/jenkins@sha256:a9cf9e95587179d843e1e9817ac2c1246c44935d5b8222b3a742114ffd88fc9a"
-  tag: "jenkins/jenkins:2.289.2-centos"
+- url: "docker://docker.io/jenkins/jenkins@sha256:43d35d846092f5ff3ed2e24c2bc49169672bf0fd8a77f71b5464eec8e24920f7"
+  tag: "jenkins/jenkins:2.289.3-centos"
 - filename: jenkins-plugin-manager.jar
   url: https://github.com/jenkinsci/plugin-installation-manager-tool/releases/download/2.10.0/jenkins-plugin-manager-2.10.0.jar
   validation: