diff --git a/Makefile b/Makefile
index 33b86d8b42..630708cde2 100644
--- a/Makefile
+++ b/Makefile
@@ -23,7 +23,7 @@ DEBUG_TOOLS_SOURCE := scratch
 EMBED_TARGET ?= embed
 
 PKGS_PREFIX ?= ghcr.io/siderolabs
-PKGS ?= v1.10.0-alpha.0-24-g17a80ee
+PKGS ?= v1.10.0-alpha.0-25-g72f19a2
 EXTRAS ?= v1.9.0
 
 KRES_IMAGE ?= ghcr.io/siderolabs/kres:latest
diff --git a/hack/release.toml b/hack/release.toml
index db995dc380..a38b444845 100644
--- a/hack/release.toml
+++ b/hack/release.toml
@@ -21,6 +21,7 @@ preface = """
 * Linux: 6.12.9
 * CNI plugins: 1.6.1
 * runc: 1.2.4
+* containerd: 2.0.2
 
 Talos is built with Go 1.23.4.
 """
diff --git a/pkg/machinery/constants/constants.go b/pkg/machinery/constants/constants.go
index 166dd5c819..70d5b69fca 100644
--- a/pkg/machinery/constants/constants.go
+++ b/pkg/machinery/constants/constants.go
@@ -543,7 +543,7 @@ const (
 	TrustdUserID = 51
 
 	// DefaultContainerdVersion is the default container runtime version.
-	DefaultContainerdVersion = "2.0.1"
+	DefaultContainerdVersion = "2.0.2"
 
 	// SystemContainerdNamespace is the Containerd namespace for Talos services.
 	SystemContainerdNamespace = "system"
diff --git a/pkg/machinery/gendata/data/pkgs b/pkg/machinery/gendata/data/pkgs
index 5b0d54b087..0ad60dec46 100644
--- a/pkg/machinery/gendata/data/pkgs
+++ b/pkg/machinery/gendata/data/pkgs
@@ -1 +1 @@
-v1.10.0-alpha.0-24-g17a80ee
\ No newline at end of file
+v1.10.0-alpha.0-25-g72f19a2
\ No newline at end of file