diff --git a/ansible/inventory/offline/group_vars/all/offline.yml b/ansible/inventory/offline/group_vars/all/offline.yml
index 1233936b7..3159a3b03 100644
--- a/ansible/inventory/offline/group_vars/all/offline.yml
+++ b/ansible/inventory/offline/group_vars/all/offline.yml
@@ -35,7 +35,8 @@ containerd_download_url: "{{ binaries_url }}/containerd-{{ containerd_version }}
 runc_download_url: "{{ binaries_url }}/runc.{{ image_arch }}"
 etcd_download_url: "{{ binaries_url }}/etcd-{{ etcd_version }}-linux-{{ image_arch }}.tar.gz"
 nerdctl_download_url: "{{ binaries_url }}/nerdctl-{{ nerdctl_version }}-linux-{{ image_arch }}.tar.gz"
-cassandra_url: "{{ binaries_url }}/apache-cassandra-3.11.16-bin.tar.gz"
+cassandra_version: "3.11.19"
+cassandra_url: "{{ binaries_url }}/apache-cassandra-3.11.19-bin.tar.gz"
 prometheus_jmx_url: "{{ binaries_url }}/jmx_prometheus_javaagent-0.10.jar"
 
 # The elasticsearch role is turing-complete in determining the right repo,
diff --git a/changelog.d/2-wire-builds/update-cassandra-version b/changelog.d/2-wire-builds/update-cassandra-version
new file mode 100644
index 000000000..e91d1dc8a
--- /dev/null
+++ b/changelog.d/2-wire-builds/update-cassandra-version
@@ -0,0 +1 @@
+Changed: update Cassandra from 3.11.16 to 3.11.19
diff --git a/nix/pkgs/wire-binaries.nix b/nix/pkgs/wire-binaries.nix
index 8946c56f4..c9815a764 100644
--- a/nix/pkgs/wire-binaries.nix
+++ b/nix/pkgs/wire-binaries.nix
@@ -22,7 +22,7 @@ let
 
 
   # Note: If you change a version, replace the checksum with zeros, run « nix-build --no-out-link -A pkgs.wire-binaries », it will complain and give you the right checksum, use that checksum in this file, run it again and it should build without complaining.
-  cassandra_version = "3.11.16";
+  cassandra_version = "3.11.19";
   jmx_prometheus_javaagent_version = "0.10";
   elasticsearch_version = "6.8.23";
   srcs = {
@@ -84,7 +84,7 @@ let
     cassandra = fetchurl rec {
       passthru.url = url;
       url = "http://archive.apache.org/dist/cassandra/${ cassandra_version }/apache-cassandra-${ cassandra_version }-bin.tar.gz";
-      sha256 = "sha256-zQHG0SNFMWoflAEzJj7qnShMeiC370XCbxoitbR1/Ag=";
+      sha256 = "sha256-ZyQJ04BM3enCe0x+na+Q/ccySsbbjyYI4iXysAzUVTQ=";
     };
     jmx_prometheus_javaagent = fetchurl rec {
       passthru.url = url;