diff --git a/CHANGELOG.md b/CHANGELOG.md
index 444408bd8c..9ddcb1f110 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -25,6 +25,10 @@
 - Bump etcd version to [3.5.15](https://github.com/etcd-io/etcd/releases/tag/v3.5.15)
   (PR[#4417](https://github.com/scality/metalk8s/pull/4417))
 
+- Bump the rocky base image used by `salt-master` and `metalk8s-utils`
+  images to [latest version](https://hub.docker.com/layers/rockylinux/rockylinux/8/images/sha256-f514765516176a9aa4729ee83964e5a1900df95fd4bc7182cca64c7199b7eec7)
+  (PR[#4454](https://github.com/scality/metalk8s/pull/4454))
+
 ## Release 128.0.1 (in development)
 
 ## Release 128.0.0
diff --git a/buildchain/buildchain/versions.py b/buildchain/buildchain/versions.py
index 0f8308bdae..6bc890f098 100644
--- a/buildchain/buildchain/versions.py
+++ b/buildchain/buildchain/versions.py
@@ -70,10 +70,10 @@ def load_version_information() -> None:
 # }}}
 # Container images {{{
 
-ROCKY_BASE_IMAGE: str = "docker.io/rockylinux"
+ROCKY_BASE_IMAGE: str = "docker.io/rockylinux/rockylinux"
 ROCKY_BASE_IMAGE_SHA256: str = (
-    # rockylinux:8.9.20231119
-    "c464612ef7e3d54d658c3eaa4778b5cdc990ec7a4d9ab63b0f00c9994c6ce980"
+    # rockylinux:8
+    "e8a49c5403b687db05d4d67333fa45808fbe74f36e683cec7abb1f7d0f2338c6"
 )
 
 ETCD_VERSION: str = "3.5.15"