diff --git a/Dockerfile b/Dockerfile
index 4d4df15129..9381f83d10 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,7 +6,7 @@ ARG GOLANG_IMAGE="golang:${GO_VERSION}-${BASE_DEBIAN_DISTRO}"
 
 # XX_VERSION specifies the version of the xx utility to use.
 # It must be a valid tag in the docker.io/tonistiigi/xx image repository.
-ARG XX_VERSION=1.7.0
+ARG XX_VERSION=1.9.0
 
 # VPNKIT_VERSION is the version of the vpnkit binary which is used as a fallback
 # network driver for rootless.
diff --git a/cmd/dockerd/winresources/Dockerfile b/cmd/dockerd/winresources/Dockerfile
index 29c40541ed..881f99005c 100644
--- a/cmd/dockerd/winresources/Dockerfile
+++ b/cmd/dockerd/winresources/Dockerfile
@@ -4,7 +4,7 @@ ARG DEBIAN_VERSION=bookworm
 
 # XX_VERSION specifies the version of the xx utility to use.
 # It must be a valid tag in the docker.io/tonistiigi/xx image repository.
-ARG XX_VERSION=1.7.0
+ARG XX_VERSION=1.9.0
 
 # xx is a helper for cross-compilation
 FROM --platform=$BUILDPLATFORM tonistiigi/xx:${XX_VERSION} AS xx