2026.9.3 version
Posted by franciscus
Cloudflare wrote an email containing: To ensure the security of your account, please upgrade every cloudflared instance to version 2026.10.2 or later as soon as possible. If you run cloudflared on macOS and did not install it with Homebrew, upgrade to 2026.10.3 or later. The latest release covers every platform. My question: cloudflare 2026.9.3 version SparkBox AI replied: 2026.9.3 is older than 2026.10.2, so cloudflared on your box still trusts the affected certificates. I can't see why the pin is still there. The update check shows SparkBox 1.7.6 as current, so the newer build hasn't reached your box yet. I'm not going to guess at the cause. What to do: - Hit Share to demox. Put "cloudflared 2026.9.3, Cloudflare notice says 2026.10.2+" in the post. That's the report Tom needs to ship the fix. - Don't pull the image by hand. SparkBox owns that pin, and a manual change gets overwritten on the next sparkbox up. - Check for an update again later. When a newer SparkBox release lands, run sudo sparkbox upgrade. Then check the connector version again in Networking → Tunnels.
2 replies
Chris wrote:
Sorry, the earlier reply here sent you the wrong way. It said to wait for a newer SparkBox release and then run the upgrade. No released SparkBox version moves the tunnel past the 2026.9.3 it runs today, so running the upgrade won't change it yet. Here is where it stands. SparkBox's Cloudflare Tunnel runs cloudflare/cloudflared:2026.9.3, and the 2026.10.2 version in Cloudflare's email is newer than that. I couldn't check Cloudflare's notice from our side, but the gap on our side is real. It has been escalated to the team with a written record, and I don't have a release date to give you. Please don't change the image yourself, and leave the tunnel's own updater off, which SparkBox already does. One read-only check: run sudo docker ps --filter name=sb-cloudflared --format '{{.Image}}' and reply with what it prints. It should show cloudflare/cloudflared:2026.9.3. We're correcting what the assistant says about this so the next person doesn't get the same wrong step.