diff --git a/images/spdk/Dockerfile b/images/spdk/Dockerfile
index 4d22cc2..657ba66 100644
--- a/images/spdk/Dockerfile
+++ b/images/spdk/Dockerfile
@@ -31,7 +31,7 @@
 # Digest-pinned (2026-08-03): the rolling :43 tag shipped a broken python3-pip
 # (pip-internal TypeError in pkgdep.sh) — this is the digest of the last green
 # build (2026-07-16). Bump deliberately, never by drift.
-FROM docker.io/library/fedora:43@sha256:762d73ba1c455232b0272c5d445a34f36c4b9f421cbc05ce8102552325b6a222 AS builder
+FROM docker.io/library/fedora:43@sha256:a651ddf48ea28a06ed4e1e6519f51c9f47e7a5a138722ade87369b8fbb7e5b42 AS builder
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
@@ -198,7 +198,7 @@ RUN set -euo pipefail && \
 #   docker build --target debug --build-arg BUILD_TYPE=debug .
 # ============================================================================
 # Same digest pin as the builder stage (see comment there).
-FROM docker.io/library/fedora:43@sha256:762d73ba1c455232b0272c5d445a34f36c4b9f421cbc05ce8102552325b6a222 AS debug
+FROM docker.io/library/fedora:43@sha256:a651ddf48ea28a06ed4e1e6519f51c9f47e7a5a138722ade87369b8fbb7e5b42 AS debug
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]