diff --git a/third_party/contour-latest/contour.yaml b/third_party/contour-latest/contour.yaml
index 72ebeb7777d8..a423fdf6f8dd 100644
--- a/third_party/contour-latest/contour.yaml
+++ b/third_party/contour-latest/contour.yaml
@@ -1499,7 +1499,7 @@ spec:
         # if we change this on each version, you can no longer upgrade
         # just by applying the deployment YAML.
         # See #2423, #2395, #2150, and #2030 for earlier questions about this.
-        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:6107c5b0cdd7dc83c2d1382525635ade76851d82966b1f77aa2597475ebabb7e
+        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:d61fdaf854b0d8e10a4ddb88b2203bb43dc4781a8b0a82f05ecbd9e1453cd4c6
         imagePullPolicy: Always
         command:
         - contour
@@ -1704,7 +1704,7 @@ spec:
         - --contour-key-file=/certs/tls.key
         - --config-path=/config/contour.yaml
         command: ["contour"]
-        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:6107c5b0cdd7dc83c2d1382525635ade76851d82966b1f77aa2597475ebabb7e
+        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:d61fdaf854b0d8e10a4ddb88b2203bb43dc4781a8b0a82f05ecbd9e1453cd4c6
         imagePullPolicy: IfNotPresent
         name: contour
         ports:
@@ -1790,7 +1790,7 @@ spec:
         args:
         - envoy
         - shutdown-manager
-        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:6107c5b0cdd7dc83c2d1382525635ade76851d82966b1f77aa2597475ebabb7e
+        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:d61fdaf854b0d8e10a4ddb88b2203bb43dc4781a8b0a82f05ecbd9e1453cd4c6
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
@@ -1866,7 +1866,7 @@ spec:
         - --envoy-key-file=/certs/tls.key
         command:
         - contour
-        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:6107c5b0cdd7dc83c2d1382525635ade76851d82966b1f77aa2597475ebabb7e
+        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:d61fdaf854b0d8e10a4ddb88b2203bb43dc4781a8b0a82f05ecbd9e1453cd4c6
         imagePullPolicy: IfNotPresent
         name: envoy-initconfig
         volumeMounts:
@@ -3393,7 +3393,7 @@ spec:
         # if we change this on each version, you can no longer upgrade
         # just by applying the deployment YAML.
         # See #2423, #2395, #2150, and #2030 for earlier questions about this.
-        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:6107c5b0cdd7dc83c2d1382525635ade76851d82966b1f77aa2597475ebabb7e
+        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:d61fdaf854b0d8e10a4ddb88b2203bb43dc4781a8b0a82f05ecbd9e1453cd4c6
         imagePullPolicy: Always
         command:
         - contour
@@ -3598,7 +3598,7 @@ spec:
         - --contour-key-file=/certs/tls.key
         - --config-path=/config/contour.yaml
         command: ["contour"]
-        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:6107c5b0cdd7dc83c2d1382525635ade76851d82966b1f77aa2597475ebabb7e
+        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:d61fdaf854b0d8e10a4ddb88b2203bb43dc4781a8b0a82f05ecbd9e1453cd4c6
         imagePullPolicy: IfNotPresent
         name: contour
         ports:
@@ -3684,7 +3684,7 @@ spec:
         args:
         - envoy
         - shutdown-manager
-        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:6107c5b0cdd7dc83c2d1382525635ade76851d82966b1f77aa2597475ebabb7e
+        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:d61fdaf854b0d8e10a4ddb88b2203bb43dc4781a8b0a82f05ecbd9e1453cd4c6
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
@@ -3760,7 +3760,7 @@ spec:
         - --envoy-key-file=/certs/tls.key
         command:
         - contour
-        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:6107c5b0cdd7dc83c2d1382525635ade76851d82966b1f77aa2597475ebabb7e
+        image: gcr.io/knative-nightly/github.com/projectcontour/contour/cmd/contour@sha256:d61fdaf854b0d8e10a4ddb88b2203bb43dc4781a8b0a82f05ecbd9e1453cd4c6
         imagePullPolicy: IfNotPresent
         name: envoy-initconfig
         volumeMounts:
diff --git a/third_party/contour-latest/net-contour.yaml b/third_party/contour-latest/net-contour.yaml
index 29c3e7eb5c25..2a8ba87ed539 100644
--- a/third_party/contour-latest/net-contour.yaml
+++ b/third_party/contour-latest/net-contour.yaml
@@ -35,7 +35,7 @@ metadata:
   namespace: knative-serving
   labels:
     networking.knative.dev/ingress-provider: contour
-    serving.knative.dev/release: "v20200921-b8f8f253"
+    serving.knative.dev/release: "v20200923-f9cf16d7"
 data:
   _example: |
     ################################
@@ -100,7 +100,7 @@ spec:
       - name: controller
         # This is the Go import path for the binary that is containerized
         # and substituted here.
-        image: gcr.io/knative-nightly/knative.dev/net-contour/cmd/controller@sha256:6827aa2704a4c65b2cb0a64927b67d0039046f57f3e4dec450bdab7fb14d349a
+        image: gcr.io/knative-nightly/knative.dev/net-contour/cmd/controller@sha256:f1bd6ad5a415f3f35e1aa6ed63cbf47dbfd55d6c2ab80eeb4f7313fdc9e6bef0
         resources:
           requests:
             cpu: 40m