diff --git a/baseimage-bookworm/README.md b/baseimage-bookworm/README.md
index 2319c82dd..2e38f1568 100644
--- a/baseimage-bookworm/README.md
+++ b/baseimage-bookworm/README.md
@@ -170,7 +170,7 @@ ii   libslang2                2.3.3-3                         amd64  S-Lang prog
 ii   libsmartcols1            2.38.1-5+b1                     amd64  smart column output alignment library
 ii   libss2                   1.47.0-2                        amd64  command-line interface parsing library
 ii   libssh2-1                1.10.0-3+b1                     amd64  SSH2 client-side library
-ii   libssl3                  3.0.11-1~deb12u1                amd64  Secure Sockets Layer toolkit - shared libraries
+ii   libssl3                  3.0.11-1~deb12u2                amd64  Secure Sockets Layer toolkit - shared libraries
 ii   libstdc++6               12.2.0-14                       amd64  GNU Standard C++ Library v3
 ii   libsystemd0              252.17-1~deb12u1                amd64  systemd utility library
 ii   libtasn1-6               4.19.0-2                        amd64  Manage ASN.1 structures (runtime)
@@ -198,7 +198,7 @@ ii   net-tools                2.10-0.1                        amd64  NET-3 netwo
 ii   openssh-client           1:9.2p1-2+deb12u1               amd64  secure shell (SSH) client, for secure access to remote machines
 ii   openssh-server           1:9.2p1-2+deb12u1               amd64  secure shell (SSH) server, for secure access from remote machines
 ii   openssh-sftp-server      1:9.2p1-2+deb12u1               amd64  secure shell (SSH) sftp server module, for SFTP access from remote machines
-ii   openssl                  3.0.11-1~deb12u1                amd64  Secure Sockets Layer toolkit - cryptographic utility
+ii   openssl                  3.0.11-1~deb12u2                amd64  Secure Sockets Layer toolkit - cryptographic utility
 ii   orphan-sysvinit-scripts  0.14                            all    Orphaned System-V-like init scripts
 ii   passwd                   1:4.13+dfsg1-1+b1               amd64  change and administer password and group data
 ii   perl                     5.36.0-7                        amd64  Larry Wall's Practical Extraction and Report Language
diff --git a/baseimage-bookworm/debian-packages.json b/baseimage-bookworm/debian-packages.json
index cc23af2fb..9e392d093 100644
--- a/baseimage-bookworm/debian-packages.json
+++ b/baseimage-bookworm/debian-packages.json
@@ -3097,7 +3097,7 @@
     "Section": "libs",
     "Status": "install ok installed",
     "Suggests": "",
-    "Version": "3.0.11-1~deb12u1",
+    "Version": "3.0.11-1~deb12u2",
     "binary:Package": "libssl3:amd64",
     "binary:Summary": "Secure Sockets Layer toolkit - shared libraries",
     "db:Status-Abbrev": "ii ",
@@ -3105,7 +3105,7 @@
     "db:Status-Status": "installed",
     "db:Status-Eflag": "ok",
     "source:Package": "openssl",
-    "source:Version": "3.0.11-1~deb12u1"
+    "source:Version": "3.0.11-1~deb12u2"
   },
   {
     "Architecture": "amd64",
@@ -3881,7 +3881,7 @@
     "Section": "utils",
     "Status": "install ok installed",
     "Suggests": "ca-certificates",
-    "Version": "3.0.11-1~deb12u1",
+    "Version": "3.0.11-1~deb12u2",
     "binary:Package": "openssl",
     "binary:Summary": "Secure Sockets Layer toolkit - cryptographic utility",
     "db:Status-Abbrev": "ii ",
@@ -3889,7 +3889,7 @@
     "db:Status-Status": "installed",
     "db:Status-Eflag": "ok",
     "source:Package": "openssl",
-    "source:Version": "3.0.11-1~deb12u1"
+    "source:Version": "3.0.11-1~deb12u2"
   },
   {
     "Architecture": "all",