diff --git a/Earthfile b/Earthfile
index 0be1247..f878376 100644
--- a/Earthfile
+++ b/Earthfile
@@ -20,6 +20,6 @@ lint-renovate:
 # release builds and pushes the image for a specific OS
 # this is meant to be run by a github workflow
 release:
-    FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+    FROM alpine:3.24.3@sha256:1b7232cda4ca3dc20b5d1247bdc9bfb631f2661d15d323bdd6fccc035ed1a9e7
     ARG --required OS
     BUILD --pass-args ./os/$OS+release
diff --git a/common/Earthfile b/common/Earthfile
index 4768e06..ea0fe0e 100644
--- a/common/Earthfile
+++ b/common/Earthfile
@@ -1,6 +1,6 @@
 VERSION --build-auto-skip 0.8
 
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:1b7232cda4ca3dc20b5d1247bdc9bfb631f2661d15d323bdd6fccc035ed1a9e7
 
 # EARTHLY_REPO_VERSION specifies a branch and/or commit of Earthbuild/earthbuild (it defaults to the earth cli version if left empty)
 ARG EARTHLY_REPO_VERSION
@@ -108,7 +108,7 @@ build-and-test:
 # push-new-tag expects to get an image with a tag that contains a date as a suffix, and save the image with the same tag but without the date suffix
 # this is used to "graduate" the image version from a temporary version to an official version.
 push-new-tag:
-    FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+    FROM alpine:3.24.3@sha256:1b7232cda4ca3dc20b5d1247bdc9bfb631f2661d15d323bdd6fccc035ed1a9e7
     ARG --required TAG_WITH_DATE
     WAIT
         IF ! [[ "$TAG_WITH_DATE" =~ "-[0-9]{14}$" ]]
diff --git a/os/alpine-3.22/Earthfile b/os/alpine-3.22/Earthfile
index 75f274b..5784868 100644
--- a/os/alpine-3.22/Earthfile
+++ b/os/alpine-3.22/Earthfile
@@ -1,6 +1,6 @@
 VERSION --build-auto-skip 0.8
 
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:1b7232cda4ca3dc20b5d1247bdc9bfb631f2661d15d323bdd6fccc035ed1a9e7
 
 IMPORT ../../common AS common
 
diff --git a/os/alpine-3.23/Earthfile b/os/alpine-3.23/Earthfile
index a54993c..b2e955d 100644
--- a/os/alpine-3.23/Earthfile
+++ b/os/alpine-3.23/Earthfile
@@ -1,6 +1,6 @@
 VERSION --build-auto-skip 0.8
 
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:1b7232cda4ca3dc20b5d1247bdc9bfb631f2661d15d323bdd6fccc035ed1a9e7
 
 IMPORT ../../common AS common
 
diff --git a/os/alpine-3.24/Earthfile b/os/alpine-3.24/Earthfile
index c26ed07..f2daf83 100644
--- a/os/alpine-3.24/Earthfile
+++ b/os/alpine-3.24/Earthfile
@@ -1,6 +1,6 @@
 VERSION --build-auto-skip 0.8
 
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:1b7232cda4ca3dc20b5d1247bdc9bfb631f2661d15d323bdd6fccc035ed1a9e7
 
 IMPORT ../../common AS common
 
diff --git a/os/ubuntu-20.04/Earthfile b/os/ubuntu-20.04/Earthfile
index 4d4dc85..efe5fca 100644
--- a/os/ubuntu-20.04/Earthfile
+++ b/os/ubuntu-20.04/Earthfile
@@ -1,6 +1,6 @@
 VERSION --build-auto-skip 0.8
 
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:1b7232cda4ca3dc20b5d1247bdc9bfb631f2661d15d323bdd6fccc035ed1a9e7
 
 IMPORT ../../common AS common
 
diff --git a/os/ubuntu-24.04/Earthfile b/os/ubuntu-24.04/Earthfile
index 1f5b7ae..1dbe396 100644
--- a/os/ubuntu-24.04/Earthfile
+++ b/os/ubuntu-24.04/Earthfile
@@ -1,6 +1,6 @@
 VERSION --build-auto-skip 0.8
 
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:1b7232cda4ca3dc20b5d1247bdc9bfb631f2661d15d323bdd6fccc035ed1a9e7
 
 IMPORT ../../common AS common
 
diff --git a/os/ubuntu-26.04/Earthfile b/os/ubuntu-26.04/Earthfile
index 52bce2f..539ab39 100644
--- a/os/ubuntu-26.04/Earthfile
+++ b/os/ubuntu-26.04/Earthfile
@@ -1,6 +1,6 @@
 VERSION --build-auto-skip 0.8
 
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:1b7232cda4ca3dc20b5d1247bdc9bfb631f2661d15d323bdd6fccc035ed1a9e7
 
 IMPORT ../../common AS common