From 46e7555c427818267bce3fbe0aeb084487116d53 Mon Sep 17 00:00:00 2001
From: Preston Van Loon <pvanloon@offchainlabs.com>
Date: Mon, 4 Aug 2025 11:17:13 -0500
Subject: [PATCH] Update cc-debian11 to latest (#15562)

---
 WORKSPACE                           | 2 +-
 changelog/pvl-update-cc-debian11.md | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)
 create mode 100644 changelog/pvl-update-cc-debian11.md

diff --git a/WORKSPACE b/WORKSPACE
index e312154710..6cb5dcc68a 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -190,7 +190,7 @@ load("@rules_oci//oci:pull.bzl", "oci_pull")
 # A multi-arch base image
 oci_pull(
     name = "linux_debian11_multiarch_base",  # Debian bullseye
-    digest = "sha256:b82f113425c5b5c714151aaacd8039bc141821cdcd3c65202d42bdf9c43ae60b",  # 2023-12-12
+    digest = "sha256:55a5e011b2c4246b4c51e01fcc2b452d151e03df052e357465f0392fcd59fddf",
     image = "gcr.io/prysmaticlabs/distroless/cc-debian11",
     platforms = [
         "linux/amd64",
diff --git a/changelog/pvl-update-cc-debian11.md b/changelog/pvl-update-cc-debian11.md
new file mode 100644
index 0000000000..e0a17c3a9a
--- /dev/null
+++ b/changelog/pvl-update-cc-debian11.md
@@ -0,0 +1,3 @@
+### Security
+
+- Updated distroless/cc-debian11 to latest to resolve CVE-2024-2961.