diff --git a/bitnami/opensearch/3/debian-12/Dockerfile b/bitnami/opensearch/3/debian-12/Dockerfile
index 9930ebada6f6..1c3fda8b2cdb 100644
--- a/bitnami/opensearch/3/debian-12/Dockerfile
+++ b/bitnami/opensearch/3/debian-12/Dockerfile
@@ -9,13 +9,13 @@ ARG OPENSEARCH_PLUGINS
 ARG TARGETARCH
 
 LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2025-10-14T23:09:36Z" \
+      org.opencontainers.image.created="2025-10-22T20:11:39Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/opensearch/README.md" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/opensearch" \
       org.opencontainers.image.title="opensearch" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="3.3.0"
+      org.opencontainers.image.version="3.3.1"
 
 ENV HOME="/" \
     OS_ARCH="${TARGETARCH:-amd64}" \
@@ -32,8 +32,8 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
     mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
     COMPONENTS=( \
       "yq-4.48.1-1-linux-${OS_ARCH}-debian-12" \
-      "jre-21.0.8-12-1-linux-${OS_ARCH}-debian-12" \
-      "opensearch-3.3.0-0-linux-${OS_ARCH}-debian-12" \
+      "jre-21.0.9-11-0-linux-${OS_ARCH}-debian-12" \
+      "opensearch-3.3.1-0-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -52,7 +52,7 @@ RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
 COPY rootfs /
 RUN /opt/bitnami/scripts/opensearch/postunpack.sh
 RUN /opt/bitnami/scripts/java/postunpack.sh
-ENV APP_VERSION="3.3.0" \
+ENV APP_VERSION="3.3.1" \
     BITNAMI_APP_NAME="opensearch" \
     IMAGE_REVISION="0" \
     JAVA_HOME="/opt/bitnami/java" \
diff --git a/bitnami/opensearch/3/debian-12/rootfs/opt/bitnami/scripts/libopensearch.sh b/bitnami/opensearch/3/debian-12/rootfs/opt/bitnami/scripts/libopensearch.sh
index d8eadd9dcdfb..12a32f4f31c8 100644
--- a/bitnami/opensearch/3/debian-12/rootfs/opt/bitnami/scripts/libopensearch.sh
+++ b/bitnami/opensearch/3/debian-12/rootfs/opt/bitnami/scripts/libopensearch.sh
@@ -782,13 +782,14 @@ elasticsearch_initialize() {
             [[ -n "$DB_ACTION_DESTRUCTIVE_REQUIRES_NAME" ]] && elasticsearch_conf_set action.destructive_requires_name "$(is_boolean_yes "$DB_ACTION_DESTRUCTIVE_REQUIRES_NAME" && echo "true" || echo "false")"
             # X-Pack settings.
             elasticsearch_conf_set xpack.security.enabled "$(is_boolean_yes "$DB_ENABLE_SECURITY" && echo "true" || echo "false")"
+            ! is_empty_value "$ELASTICSEARCH_PASSWD_HASH_ALGORITHM" && elasticsearch_conf_set xpack.security.authc.password_hashing.algorithm "$ELASTICSEARCH_PASSWD_HASH_ALGORITHM"
             ! is_empty_value "$DB_PASSWORD" && elasticsearch_set_key_value "bootstrap.password" "$DB_PASSWORD"
             if is_boolean_yes "$DB_ENABLE_SECURITY"; then
                 is_boolean_yes "$DB_ENABLE_REST_TLS" && elasticsearch_http_tls_configuration
                 ! is_boolean_yes "$DB_SKIP_TRANSPORT_TLS" && elasticsearch_transport_tls_configuration
                 if is_boolean_yes "$ELASTICSEARCH_ENABLE_FIPS_MODE"; then
                     elasticsearch_conf_set xpack.security.fips_mode.enabled "true"
-                    elasticsearch_conf_set xpack.security.authc.password_hashing.algorithm "pbkdf2"
+                    elasticsearch_conf_set xpack.security.authc.password_hashing.algorithm "${ELASTICSEARCH_PASSWD_HASH_ALGORITHM:-pbkdf2}"
                 fi
             fi
             # Latest Elasticseach releases install x-pack-ml  by default. Since we have faced some issues with this library on certain platforms,