diff --git a/k3s.yaml b/k3s.yaml
index 574529346fb..ebcaaf721b7 100644
--- a/k3s.yaml
+++ b/k3s.yaml
@@ -1,6 +1,6 @@
 package:
   name: k3s
-  version: 1.27.2
+  version: 1.27.3
   epoch: 0
   description:
   copyright:
@@ -53,7 +53,7 @@ pipeline:
     with:
       repository: https://github.com/k3s-io/k3s
       tag: v${{vars.full-package-version}}
-      expected-commit: 213d7ad499e166290872f51c63d8eaa2f1fe78b3
+      expected-commit: fe9604cac119216e67f8bd5f14eb5608e3bcd3cf
   # First build things (almost) identical to upstream, with the k3s components embedded in the "outer" multicall binary.
   - runs: |
       # Don't include the k3s-root since it conflicts with wolfi variants (ie: busybox and ip6tables)