diff --git a/alpine/Dockerfile b/alpine/Dockerfile
index 064ee286..963095e5 100644
--- a/alpine/Dockerfile
+++ b/alpine/Dockerfile
@@ -20,7 +20,7 @@
 # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 # SOFTWARE.
 
-ARG JAVA_VERSION=17.0.11_9
+ARG JAVA_VERSION=17.0.12_7
 ARG ALPINE_TAG=3.20.2
 FROM alpine:"${ALPINE_TAG}" AS jre-build
 
@@ -33,7 +33,7 @@ ARG TARGETPLATFORM
 COPY jdk-download-url.sh /usr/bin/local/jdk-download-url.sh
 COPY jdk-download.sh /usr/bin/local/jdk-download.sh
 
-ARG JAVA_VERSION=17.0.11_9
+ARG JAVA_VERSION=17.0.12_7
 # hadolint ignore=DL3018
 RUN apk add --no-cache \
     ca-certificates \
diff --git a/debian/Dockerfile b/debian/Dockerfile
index b07c7bbe..19a44954 100644
--- a/debian/Dockerfile
+++ b/debian/Dockerfile
@@ -31,7 +31,7 @@ ARG TARGETPLATFORM
 COPY jdk-download-url.sh /usr/bin/local/jdk-download-url.sh
 COPY jdk-download.sh /usr/bin/local/jdk-download.sh
 
-ARG JAVA_VERSION=17.0.11_9
+ARG JAVA_VERSION=17.0.12_7
 # hadolint ignore=DL3008
 RUN set -x; apt-get update \
   && apt-get install --no-install-recommends -y \
diff --git a/docker-bake.hcl b/docker-bake.hcl
index 651cae74..75520646 100644
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -69,7 +69,7 @@ variable "JAVA11_VERSION" {
 }
 
 variable "JAVA17_VERSION" {
-  default = "17.0.11_9"
+  default = "17.0.12_7"
 }
 
 variable "JAVA21_VERSION" {