diff --git a/.github/workflows/pr_build.yaml b/.github/workflows/pr_build.yaml
index 210a8550d6..a71aa0303d 100644
--- a/.github/workflows/pr_build.yaml
+++ b/.github/workflows/pr_build.yaml
@@ -3,7 +3,7 @@ on:
   pull_request: {}
   workflow_dispatch: {}
 env:
-  GO_VERSION: 1.20.1
+  GO_VERSION: 1.20.3
 permissions:
   contents: read
 
diff --git a/.github/workflows/release_build.yaml b/.github/workflows/release_build.yaml
index 644c81d7e1..377b636e87 100644
--- a/.github/workflows/release_build.yaml
+++ b/.github/workflows/release_build.yaml
@@ -4,7 +4,7 @@ on:
     tags:
       - 'v[0-9].[0-9]+.[0-9]+'
 env:
-  GO_VERSION: 1.20.1
+  GO_VERSION: 1.20.3
 jobs:
   cache-deps:
     name: cache-deps (linux)
diff --git a/.go-version b/.go-version
index 0044d6cb96..f5b00dc262 100644
--- a/.go-version
+++ b/.go-version
@@ -1 +1 @@
-1.20.1
+1.20.3
diff --git a/CHANGELOG.md b/CHANGELOG.md
index dae796998e..c3305a5ece 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## [1.6.2] - 2023-04-04
+
+### Security
+
+- Updated to Go 1.20.3 to address CVE-2023-24534
+
 ## [1.6.1] - 2023-03-1
 
 ### Fixed
diff --git a/pkg/common/version/version.go b/pkg/common/version/version.go
index b2a771414f..abb733f7d7 100644
--- a/pkg/common/version/version.go
+++ b/pkg/common/version/version.go
@@ -8,7 +8,7 @@ const (
 	// IMPORTANT: When updating, make sure to reconcile the versions list that
 	// is part of the upgrade integration test. See
 	// test/integration/suites/upgrade/README.md for details.
-	Base = "1.6.1"
+	Base = "1.6.2"
 )
 
 var (