diff --git a/community/containerd/APKBUILD b/community/containerd/APKBUILD
index 46a5542d106..f772eb40f7e 100644
--- a/community/containerd/APKBUILD
+++ b/community/containerd/APKBUILD
@@ -4,8 +4,8 @@
 pkgname=containerd
 
 # NOTE: containerd's Makefile tries to get REVISION from git, but we're building from a tarball.
-_commit=1e5ef943eb76627a6d3b6de8cd1ef6537f393a71
-pkgver=1.5.8
+_commit=1407cab509ff0d96baa4f0eb6ff9980270e6e620
+pkgver=1.5.9
 pkgrel=0
 pkgdesc="An open and reliable container runtime"
 url="https://containerd.io"
@@ -25,6 +25,8 @@ source="containerd-$pkgver.tar.gz::https://github.com/containerd/containerd/arch
 builddir="$srcdir/src/github.com/containerd/containerd"
 
 # secfixes:
+#   1.5.9-r0:
+#     - CVE-2021-43816
 #   1.5.8-r0:
 #     - CVE-2021-41190
 #   1.5.7-r0:
@@ -101,7 +103,7 @@ stress() {
 }
 
 sha512sums="
-c769506ff6d98689c46ffee94d70ae00ef2f32e0daac1e631cbe8a587f67c7e4f83eb3895707362bdf46198b61823c99df1d8ca61095ab1415de5596f106fd07  containerd-1.5.8.tar.gz
+13d5b8bcfd811b1abf67008d1c664962f315cd45d885adaa88847bcc4f1c5d743dccd62bc34fe77348ca18a4f8841ce7a8a022cccb275b19b59017b3fbf1054b  containerd-1.5.9.tar.gz
 21a9888b684913138ec4a342b0b69e40e9c773ecd329c4e2401a807365586468cb19035583a4fc8b0f86138f5ee4c7fb911c75495263e4b43d2886ea11e0e271  containerd.confd
 2818cb9e062a6b75c5e2ad6a076eb26edc9fd9b70356b37f9306d082dc360a2d7bd802531afd8e73998cc0fdaa6ad34cd7a0a1d67bd98ee1bb7f30bab16d6084  containerd.initd
 "