diff --git a/.changelog/3418.txt b/.changelog/3418.txt
new file mode 100644
index 0000000000..032356f989
--- /dev/null
+++ b/.changelog/3418.txt
@@ -0,0 +1,3 @@
+```release-note:security
+Upgrade OpenShift container images to use `ubi9-minimal:9.3` as the base image.
+```
diff --git a/control-plane/Dockerfile b/control-plane/Dockerfile
index 42d8e08faf..b9a3252271 100644
--- a/control-plane/Dockerfile
+++ b/control-plane/Dockerfile
@@ -127,7 +127,7 @@ FROM release-default AS release-default-fips
 # We don't rebuild the software because we want the exact checksums and
 # binary signatures to match the software and our builds aren't fully
 # reproducible currently.
-FROM registry.access.redhat.com/ubi9-minimal:9.2 as ubi
+FROM registry.access.redhat.com/ubi9-minimal:9.3 as ubi
 
 ARG PRODUCT_NAME
 ARG PRODUCT_VERSION