diff --git a/benchmark/acmeair-tomcat/Dockerfile.distroless b/benchmark/acmeair-tomcat/Dockerfile.distroless
index 3b87150e..b87b6991 100644
--- a/benchmark/acmeair-tomcat/Dockerfile.distroless
+++ b/benchmark/acmeair-tomcat/Dockerfile.distroless
@@ -8,7 +8,7 @@ WORKDIR /opt/chisel
 RUN go generate internal/deb/version.go \
     && go build ./cmd/chisel
 
-FROM public.ecr.aws/ubuntu/ubuntu:$UBUNTU_RELEASE@sha256:c6871ae8b54fb3ed0ba4df4eb98527e9a6692088fe0c2f2260a9334853092b47 AS builder
+FROM public.ecr.aws/ubuntu/ubuntu:$UBUNTU_RELEASE@sha256:83fc61c57dee4e20e0dfac33e988fd54160b136875cd6f4e9ff53ac178ddbeb6 AS builder
 SHELL ["/bin/bash", "-oeux", "pipefail", "-c"]
 RUN apt-get update \
     && DEBIAN_FRONTEND=noninteractive apt-get install -y ca-certificates \
diff --git a/benchmark/acmeair-tomcat/Dockerfile.yum b/benchmark/acmeair-tomcat/Dockerfile.yum
index ff01c815..37489d7d 100644
--- a/benchmark/acmeair-tomcat/Dockerfile.yum
+++ b/benchmark/acmeair-tomcat/Dockerfile.yum
@@ -1,6 +1,6 @@
 ARG BASE_IMAGE
 
-FROM fedora as builder
+FROM fedora:37 as builder
 
 ENV CATALINA_HOME /usr/local/tomcat
 ENV PATH $CATALINA_HOME/bin:$PATH
diff --git a/jre/Dockerfile.22.04 b/jre/Dockerfile.22.04
index 37e50ab0..89c2fb1c 100644
--- a/jre/Dockerfile.22.04
+++ b/jre/Dockerfile.22.04
@@ -4,7 +4,7 @@ ARG UID=101
 ARG GROUP=app
 ARG GID=101
 
-FROM public.ecr.aws/ubuntu/ubuntu:$UBUNTU_RELEASE@sha256:c6871ae8b54fb3ed0ba4df4eb98527e9a6692088fe0c2f2260a9334853092b47 AS builder
+FROM public.ecr.aws/ubuntu/ubuntu:$UBUNTU_RELEASE@sha256:83fc61c57dee4e20e0dfac33e988fd54160b136875cd6f4e9ff53ac178ddbeb6 AS builder
 ARG USER
 ARG UID
 ARG GROUP
diff --git a/tests/pdfbox/Dockerfile b/tests/pdfbox/Dockerfile
index d0a4ea45..71518ca9 100644
--- a/tests/pdfbox/Dockerfile
+++ b/tests/pdfbox/Dockerfile
@@ -13,7 +13,7 @@ WORKDIR /opt/chisel
 RUN go generate internal/deb/version.go \
     && go build ./cmd/chisel
 
-FROM public.ecr.aws/ubuntu/ubuntu:$UBUNTU_RELEASE@sha256:c6871ae8b54fb3ed0ba4df4eb98527e9a6692088fe0c2f2260a9334853092b47 AS builder
+FROM public.ecr.aws/ubuntu/ubuntu:$UBUNTU_RELEASE@sha256:83fc61c57dee4e20e0dfac33e988fd54160b136875cd6f4e9ff53ac178ddbeb6 AS builder
 SHELL ["/bin/bash", "-oeux", "pipefail", "-c"]
 RUN apt-get update \
     && DEBIAN_FRONTEND=noninteractive apt-get install -y ca-certificates \