diff --git a/stellar/build/Dockerfile b/stellar/build/Dockerfile
index 9cb8c00e..7febd13b 100644
--- a/stellar/build/Dockerfile
+++ b/stellar/build/Dockerfile
@@ -1,7 +1,7 @@
 # Base image, pinned by dated tag and index digest. The dated tag is retained
 # on Docker Hub, and the digest makes the pin immutable. Bump both together
 # following SUPPLY_CHAIN.md; Dependabot proposes the update weekly.
-FROM debian:bookworm-20261005-slim@sha256:7c7b2c966bc9ee8cedfeef67e0e279108992c77681fa595db4a9d65c06ccc587
+FROM debian:bookworm-20261020-slim@sha256:7ff6ba31527b9e336162fa061746c366c4b2032f4d2cff2078bea43f78efe3f8
 
 # Prevent timezone and other interactive prompts
 ENV DEBIAN_FRONTEND=noninteractive