diff --git a/build/build-image/cross/VERSION b/build/build-image/cross/VERSION
index ef32e84b21e..65c5f5f1eaf 100644
--- a/build/build-image/cross/VERSION
+++ b/build/build-image/cross/VERSION
@@ -1 +1 @@
-v1.16.4-1
+v1.16.4-2
diff --git a/build/dependencies.yaml b/build/dependencies.yaml
index 3bf472b3de2..023f4f48776 100644
--- a/build/dependencies.yaml
+++ b/build/dependencies.yaml
@@ -124,7 +124,7 @@ dependencies:
       match: minimum_go_version=go([0-9]+\.[0-9]+)
 
   - name: "k8s.gcr.io/kube-cross: dependents"
-    version: v1.16.4-1
+    version: v1.16.4-2
     refPaths:
     - path: build/build-image/cross/VERSION
     - path: test/images/sample-apiserver/Makefile
diff --git a/test/images/sample-apiserver/Makefile b/test/images/sample-apiserver/Makefile
index 67b76b08c59..d6b914c3175 100644
--- a/test/images/sample-apiserver/Makefile
+++ b/test/images/sample-apiserver/Makefile
@@ -24,7 +24,7 @@ export
 # Get without building to populate module cache
 # Then, get with OS/ARCH-specific env to build
 bin:
-	docker run --rm -i -v "${TARGET}:${TARGET}:Z" k8s.gcr.io/build-image/kube-cross:v1.16.4-1 \
+	docker run --rm -i -v "${TARGET}:${TARGET}:Z" k8s.gcr.io/build-image/kube-cross:v1.16.4-2 \
 		/bin/bash -c "\
 			mkdir -p /go/src /go/bin && \
 			GO111MODULE=on go get -d k8s.io/sample-apiserver@v0.17.0 && \