diff --git a/.test-defs/CreateShoot.yaml b/.test-defs/CreateShoot.yaml
index 00656ede37e..6348bcb3d81 100644
--- a/.test-defs/CreateShoot.yaml
+++ b/.test-defs/CreateShoot.yaml
@@ -41,4 +41,4 @@ spec:
 #    -machine-type=$MACHINE_TYPE
 #    -external-domain=
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/DeleteShoot.yaml b/.test-defs/DeleteShoot.yaml
index 114c4783854..5bb621fe1d2 100644
--- a/.test-defs/DeleteShoot.yaml
+++ b/.test-defs/DeleteShoot.yaml
@@ -16,4 +16,4 @@ spec:
     --shoot-name=$SHOOT_NAME
     --project-namespace=$PROJECT_NAMESPACE
     --kubecfg="$TM_KUBECONFIG_PATH/gardener.config"
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/HibernateShoot.yaml b/.test-defs/HibernateShoot.yaml
index 63006e29602..ad1af4f4671 100644
--- a/.test-defs/HibernateShoot.yaml
+++ b/.test-defs/HibernateShoot.yaml
@@ -17,4 +17,4 @@ spec:
     --project-namespace=$PROJECT_NAMESPACE
     --kubecfg="$TM_KUBECONFIG_PATH/gardener.config"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/MigrateShoot.yaml b/.test-defs/MigrateShoot.yaml
index ee11e2982d3..a360cea87bf 100644
--- a/.test-defs/MigrateShoot.yaml
+++ b/.test-defs/MigrateShoot.yaml
@@ -20,4 +20,4 @@ spec:
     -mr-exclude-list="$MR_EXCLUDE_LIST"
     -resources-with-generated-name="$RESOURCES_WITH_GENERATED_NAME"
     -add-test-run-taint="$ADD_TEST_RUN_TAINT"
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/ReconcileShoots.yaml b/.test-defs/ReconcileShoots.yaml
index c09db3c216b..40711e3a118 100644
--- a/.test-defs/ReconcileShoots.yaml
+++ b/.test-defs/ReconcileShoots.yaml
@@ -16,4 +16,4 @@ spec:
     -kubecfg=$TM_KUBECONFIG_PATH/gardener.config
     -version=$GARDENER_VERSION
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/ShootKubernetesUpdateTest.yaml b/.test-defs/ShootKubernetesUpdateTest.yaml
index 6b5f78871bc..afaa53b930c 100644
--- a/.test-defs/ShootKubernetesUpdateTest.yaml
+++ b/.test-defs/ShootKubernetesUpdateTest.yaml
@@ -20,4 +20,4 @@ spec:
     -project-namespace=$PROJECT_NAMESPACE
     -version=$K8S_VERSION
     -version-worker-pools=$K8S_VERSION_WORKER_POOLS
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteGardenerBeta.yaml b/.test-defs/TestSuiteGardenerBeta.yaml
index ab0847a1d44..0a1cf7f3256 100644
--- a/.test-defs/TestSuiteGardenerBeta.yaml
+++ b/.test-defs/TestSuiteGardenerBeta.yaml
@@ -20,4 +20,4 @@ spec:
       -ginkgo.focus="\[BETA\]"
       -ginkgo.skip="\[SERIAL\]|\[DISRUPTIVE\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteGardenerBetaSerial.yaml b/.test-defs/TestSuiteGardenerBetaSerial.yaml
index 385cb2a4267..e50b7e05e97 100644
--- a/.test-defs/TestSuiteGardenerBetaSerial.yaml
+++ b/.test-defs/TestSuiteGardenerBetaSerial.yaml
@@ -22,4 +22,4 @@ spec:
       -ginkgo.focus="\[BETA\].*\[SERIAL\]"
       -ginkgo.skip="\[DISRUPTIVE\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteGardenerDefault.yaml b/.test-defs/TestSuiteGardenerDefault.yaml
index 5a105697342..946079a88b8 100644
--- a/.test-defs/TestSuiteGardenerDefault.yaml
+++ b/.test-defs/TestSuiteGardenerDefault.yaml
@@ -20,4 +20,4 @@ spec:
       -ginkgo.focus="\[DEFAULT\]"
       -ginkgo.skip="\[SERIAL\]|\[DISRUPTIVE\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteGardenerDefaultSerial.yaml b/.test-defs/TestSuiteGardenerDefaultSerial.yaml
index b710b294759..935c6312b57 100644
--- a/.test-defs/TestSuiteGardenerDefaultSerial.yaml
+++ b/.test-defs/TestSuiteGardenerDefaultSerial.yaml
@@ -22,4 +22,4 @@ spec:
       -ginkgo.focus="\[DEFAULT\].*\[SERIAL\]"
       -ginkgo.skip="\[DISRUPTIVE\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteGardenerRelease.yaml b/.test-defs/TestSuiteGardenerRelease.yaml
index b684dffb737..55a7c4fb1f6 100644
--- a/.test-defs/TestSuiteGardenerRelease.yaml
+++ b/.test-defs/TestSuiteGardenerRelease.yaml
@@ -20,4 +20,4 @@ spec:
       -ginkgo.focus="\[RELEASE\]"
       -ginkgo.skip="\[SERIAL\]|\[DISRUPTIVE\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteGardenerReleaseSerial.yaml b/.test-defs/TestSuiteGardenerReleaseSerial.yaml
index 7a3ef6d2563..aaede9e7193 100644
--- a/.test-defs/TestSuiteGardenerReleaseSerial.yaml
+++ b/.test-defs/TestSuiteGardenerReleaseSerial.yaml
@@ -22,4 +22,4 @@ spec:
       -ginkgo.focus="\[RELEASE\].*\[SERIAL\]"
       -ginkgo.skip="\[DISRUPTIVE\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteShootBeta.yaml b/.test-defs/TestSuiteShootBeta.yaml
index 0c810bd9635..94da89f7be8 100644
--- a/.test-defs/TestSuiteShootBeta.yaml
+++ b/.test-defs/TestSuiteShootBeta.yaml
@@ -22,4 +22,4 @@ spec:
       -ginkgo.focus="\[BETA\]"
       -ginkgo.skip="\[SERIAL\]|\[DISRUPTIVE\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteShootBetaDisruptive.yaml b/.test-defs/TestSuiteShootBetaDisruptive.yaml
index d688ed90d96..e583bb7951d 100644
--- a/.test-defs/TestSuiteShootBetaDisruptive.yaml
+++ b/.test-defs/TestSuiteShootBetaDisruptive.yaml
@@ -24,4 +24,4 @@ spec:
       -ginkgo.focus="\[BETA\].*\[DISRUPTIVE\]"
       -ginkgo.skip="\[SERIAL\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteShootBetaSerial.yaml b/.test-defs/TestSuiteShootBetaSerial.yaml
index 588b895a610..78256459666 100644
--- a/.test-defs/TestSuiteShootBetaSerial.yaml
+++ b/.test-defs/TestSuiteShootBetaSerial.yaml
@@ -24,4 +24,4 @@ spec:
       -ginkgo.focus="\[BETA\].*\[SERIAL\]"
       -ginkgo.skip="\[DISRUPTIVE\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteShootDefault.yaml b/.test-defs/TestSuiteShootDefault.yaml
index 6ad775d4b8e..c84ec48ce70 100644
--- a/.test-defs/TestSuiteShootDefault.yaml
+++ b/.test-defs/TestSuiteShootDefault.yaml
@@ -23,4 +23,4 @@ spec:
       -ginkgo.skip="\[SERIAL\]|\[DISRUPTIVE\]"
       -ginkgo.timeout=2h
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteShootDefaultDisruptive.yaml b/.test-defs/TestSuiteShootDefaultDisruptive.yaml
index 8f9136410b8..8ede2ea868a 100644
--- a/.test-defs/TestSuiteShootDefaultDisruptive.yaml
+++ b/.test-defs/TestSuiteShootDefaultDisruptive.yaml
@@ -24,4 +24,4 @@ spec:
       -ginkgo.focus="\[DEFAULT\].*\[DISRUPTIVE\]"
       -ginkgo.skip="\[SERIAL\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteShootDefaultSerial.yaml b/.test-defs/TestSuiteShootDefaultSerial.yaml
index 69d61562717..ced946d2239 100644
--- a/.test-defs/TestSuiteShootDefaultSerial.yaml
+++ b/.test-defs/TestSuiteShootDefaultSerial.yaml
@@ -25,4 +25,4 @@ spec:
       -ginkgo.skip="\[DISRUPTIVE\]"
       -ginkgo.timeout=2h
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteShootRelease.yaml b/.test-defs/TestSuiteShootRelease.yaml
index 5722b97a4a2..f93e260d268 100644
--- a/.test-defs/TestSuiteShootRelease.yaml
+++ b/.test-defs/TestSuiteShootRelease.yaml
@@ -22,4 +22,4 @@ spec:
       -ginkgo.focus="\[RELEASE\]"
       -ginkgo.skip="\[SERIAL\]|\[DISRUPTIVE\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteShootReleaseDisruptive.yaml b/.test-defs/TestSuiteShootReleaseDisruptive.yaml
index c58e11962b3..edfa93c411f 100644
--- a/.test-defs/TestSuiteShootReleaseDisruptive.yaml
+++ b/.test-defs/TestSuiteShootReleaseDisruptive.yaml
@@ -24,4 +24,4 @@ spec:
       -ginkgo.focus="\[RELEASE\].*\[DISRUPTIVE\]"
       -ginkgo.skip="\[SERIAL\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/TestSuiteShootReleaseSerial.yaml b/.test-defs/TestSuiteShootReleaseSerial.yaml
index 64a12a03b4c..110f11cddc3 100644
--- a/.test-defs/TestSuiteShootReleaseSerial.yaml
+++ b/.test-defs/TestSuiteShootReleaseSerial.yaml
@@ -24,4 +24,4 @@ spec:
       -ginkgo.focus="\[RELEASE\].*\[SERIAL\]"
       -ginkgo.skip="\[DISRUPTIVE\]"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/.test-defs/WakeUpShoot.yaml b/.test-defs/WakeUpShoot.yaml
index ccca44b92c7..7e02290e923 100644
--- a/.test-defs/WakeUpShoot.yaml
+++ b/.test-defs/WakeUpShoot.yaml
@@ -17,4 +17,4 @@ spec:
     --project-namespace=$PROJECT_NAMESPACE
     --kubecfg="$TM_KUBECONFIG_PATH/gardener.config"
 
-  image: golang:1.23.2
+  image: golang:1.23.3
diff --git a/Dockerfile b/Dockerfile
index 7acb92afe92..4710301a6c7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # builder
-FROM golang:1.23.2 AS builder
+FROM golang:1.23.3 AS builder
 ARG GOPROXY=https://proxy.golang.org,direct
 ENV GOPROXY=$GOPROXY
 WORKDIR /go/src/github.com/gardener/gardener
diff --git a/hack/tools/image/variants.yaml b/hack/tools/image/variants.yaml
index 4cc4929af9c..01ecf903451 100644
--- a/hack/tools/image/variants.yaml
+++ b/hack/tools/image/variants.yaml
@@ -4,6 +4,6 @@
 # - https://github.com/gardener/ci-infra/blob/master/images/krte
 variants:
   "1.22":
-    image: golang:1.22.8-bookworm
+    image: golang:1.22.9-bookworm
   "1.23":
-    image: golang:1.23.2-bookworm
+    image: golang:1.23.3-bookworm