diff --git a/Makefile b/Makefile
index 00db175dc310..a2d27e01f4aa 100644
--- a/Makefile
+++ b/Makefile
@@ -264,7 +264,7 @@ airgap-image-bundle-linux-riscv64.tar: k0s airgap-images.txt
 
 ipv6-test-images.txt: $(GO_ENV_REQUISITES) embedded-bins/Makefile.variables hack/gen-test-images-list/main.go
 	{ \
-	  echo "docker.io/library/nginx:1.29.2-alpine"; \
+	  echo "docker.io/library/nginx:1.29.3-alpine"; \
 	  echo "docker.io/curlimages/curl:8.16.0"; \
 	  echo "docker.io/library/alpine:$(alpine_version)"; \
 	  echo "docker.io/sonobuoy/sonobuoy:v$(sonobuoy_version)"; \
diff --git a/inttest/calico/calico_test.go b/inttest/calico/calico_test.go
index 3c733687bbb7..0a1128898aad 100644
--- a/inttest/calico/calico_test.go
+++ b/inttest/calico/calico_test.go
@@ -96,7 +96,7 @@ func (s *CalicoSuite) TestK0sGetsUp() {
 		TypeMeta:   metav1.TypeMeta{Kind: "Pod", APIVersion: "v1"},
 		ObjectMeta: metav1.ObjectMeta{Name: "nginx"},
 		Spec: corev1.PodSpec{
-			Containers: []corev1.Container{{Name: "nginx", Image: "docker.io/library/nginx:1.29.2-alpine"}},
+			Containers: []corev1.Container{{Name: "nginx", Image: "docker.io/library/nginx:1.29.3-alpine"}},
 			NodeSelector: map[string]string{
 				"kubernetes.io/hostname": "worker0",
 			},
diff --git a/inttest/custom-cidrs/customcidrs_test.go b/inttest/custom-cidrs/customcidrs_test.go
index d0f94efdb9f5..de121633310b 100644
--- a/inttest/custom-cidrs/customcidrs_test.go
+++ b/inttest/custom-cidrs/customcidrs_test.go
@@ -59,7 +59,7 @@ func (s *CustomCIDRsSuite) TestK0sGetsUp() {
 		Spec: corev1.PodSpec{
 			Containers: []corev1.Container{{
 				Name:  "nginx",
-				Image: "docker.io/library/nginx:1.29.2-alpine",
+				Image: "docker.io/library/nginx:1.29.3-alpine",
 				ReadinessProbe: &corev1.Probe{
 					ProbeHandler: corev1.ProbeHandler{
 						HTTPGet: &corev1.HTTPGetAction{
diff --git a/inttest/dualstack/dualstack_test.go b/inttest/dualstack/dualstack_test.go
index cd2b1ea4bfaa..2bc030a6a83e 100644
--- a/inttest/dualstack/dualstack_test.go
+++ b/inttest/dualstack/dualstack_test.go
@@ -127,7 +127,7 @@ func (s *DualstackSuite) SetupSuite() {
 		TypeMeta:   metav1.TypeMeta{Kind: "Pod", APIVersion: "v1"},
 		ObjectMeta: metav1.ObjectMeta{Name: "nginx-worker0"},
 		Spec: corev1.PodSpec{
-			Containers: []corev1.Container{{Name: "nginx-worker0", Image: "docker.io/library/nginx:1.29.2-alpine"}},
+			Containers: []corev1.Container{{Name: "nginx-worker0", Image: "docker.io/library/nginx:1.29.3-alpine"}},
 			NodeSelector: map[string]string{
 				"kubernetes.io/hostname": "worker0",
 			},
@@ -143,7 +143,7 @@ func (s *DualstackSuite) SetupSuite() {
 		TypeMeta:   metav1.TypeMeta{Kind: "Pod", APIVersion: "v1"},
 		ObjectMeta: metav1.ObjectMeta{Name: "nginx-worker1"},
 		Spec: corev1.PodSpec{
-			Containers: []corev1.Container{{Name: "alpine", Image: "docker.io/library/nginx:1.29.2-alpine"}},
+			Containers: []corev1.Container{{Name: "alpine", Image: "docker.io/library/nginx:1.29.3-alpine"}},
 			NodeSelector: map[string]string{
 				"kubernetes.io/hostname": "worker1",
 			},
diff --git a/inttest/kuberouter/kuberouter_hairpin_test.go b/inttest/kuberouter/kuberouter_hairpin_test.go
index 1ca5252a506e..64b0bf25b509 100644
--- a/inttest/kuberouter/kuberouter_hairpin_test.go
+++ b/inttest/kuberouter/kuberouter_hairpin_test.go
@@ -140,7 +140,7 @@ metadata:
 spec:
   containers:
   - name: nginx
-    image: docker.io/library/nginx:1.29.2-alpine
+    image: docker.io/library/nginx:1.29.3-alpine
     ports:
     - containerPort: 80
   - name: curl