diff --git a/build/build-image/cross/VERSION b/build/build-image/cross/VERSION
index eb2573a06ea..0952a065887 100644
--- a/build/build-image/cross/VERSION
+++ b/build/build-image/cross/VERSION
@@ -1 +1 @@
-v1.15.2-1
+v1.15.5-1
diff --git a/build/dependencies.yaml b/build/dependencies.yaml
index 809bc37d87b..3081995856c 100644
--- a/build/dependencies.yaml
+++ b/build/dependencies.yaml
@@ -99,18 +99,20 @@ dependencies:
 
   # Golang
   - name: "golang: upstream version"
-    version: 1.15.2
+    version: 1.15.5
     refPaths:
     - path: build/build-image/cross/VERSION
     - path: build/root/WORKSPACE
       match: (override_)?go_version = "\d+.\d+(alpha|beta|rc)?\.?\d+"
+    - path: cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
+      match: 'FROM golang\:\d+.\d+(alpha|beta|rc)?\.?(\d+)?'
     - path: test/images/Makefile
       match: GOLANG_VERSION=\d+.\d+(alpha|beta|rc)?\.?\d+
     - path: staging/publishing/rules.yaml
       match: 'default-go-version\: \d+.\d+(alpha|beta|rc)?\.?(\d+)?'
 
   - name: "k8s.gcr.io/kube-cross: dependents"
-    version: v1.15.2-1
+    version: v1.15.5-1
     refPaths:
     - path: build/build-image/cross/VERSION
     - path: test/images/sample-apiserver/Makefile
diff --git a/build/root/WORKSPACE b/build/root/WORKSPACE
index b9164d04ae8..8ce0d2c0424 100644
--- a/build/root/WORKSPACE
+++ b/build/root/WORKSPACE
@@ -23,7 +23,7 @@ load("@io_k8s_repo_infra//:repos.bzl", repo_infra_configure = "configure", repo_
 #            'override_go_version': used to specify an alternate go version provided
 #                                   by kubernetes/repo-infra
 repo_infra_configure(
-    go_version = "1.15.2",
+    go_version = "1.15.5",
     minimum_bazel_version = "2.2.0",
 )
 
diff --git a/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile b/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
index 5180f3febfd..35bf1181eab 100644
--- a/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
+++ b/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.15.3 AS builder
+FROM golang:1.15.5 AS builder
 COPY elasticsearch_logging_discovery.go go.mod go.sum /
 RUN CGO_ENABLED=0 GOOS=linux GO111MODULE=on go build -a -ldflags "-w" -o /elasticsearch_logging_discovery /elasticsearch_logging_discovery.go
 
diff --git a/test/images/Makefile b/test/images/Makefile
index 68eafb4d625..cae537e9390 100644
--- a/test/images/Makefile
+++ b/test/images/Makefile
@@ -16,7 +16,7 @@ REGISTRY ?= gcr.io/kubernetes-e2e-test-images
 GOARM ?= 7
 DOCKER_CERT_BASE_PATH ?=
 QEMUVERSION=v5.1.0-2
-GOLANG_VERSION=1.15.2
+GOLANG_VERSION=1.15.5
 export
 
 ifndef WHAT
diff --git a/test/images/sample-apiserver/Makefile b/test/images/sample-apiserver/Makefile
index 7a3932acc66..e44c04a0f4d 100644
--- a/test/images/sample-apiserver/Makefile
+++ b/test/images/sample-apiserver/Makefile
@@ -24,7 +24,7 @@ export
 # Get without building to populate module cache
 # Then, get with OS/ARCH-specific env to build
 bin:
-	docker run --rm -it -v "${TARGET}:${TARGET}:Z" k8s.gcr.io/build-image/kube-cross:v1.15.2-1 \
+	docker run --rm -it -v "${TARGET}:${TARGET}:Z" k8s.gcr.io/build-image/kube-cross:v1.15.5-1 \
 		/bin/bash -c "\
 			mkdir -p /go/src /go/bin && \
 			GO111MODULE=on go get -d k8s.io/sample-apiserver@v0.17.0 && \