[rpms/buildah] update-buildah-cve-2026-46597: buildah-1.18.0-3.el9

[rpms/buildah] update-buildah-cve-2026-46597: buildah-1.18.0-3.el9

[Jindrich Novy]

            A new commit has been pushed.

            Repo   : rpms/buildah
            Branch : update-buildah-cve-2026-46597
            Commit : 1d0caafb73127d5023eb5071a80c2e8bfe6d9512
            Author : Jindrich Novy <jnovy@redhat.com>
            Date   : 2020-12-05T10:47:40+01:00
            Stats  : +9/-2 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/buildah/c/1d0caafb73127d5023eb5071a80c2e8bfe6d9512?branch=update-buildah-cve-2026-46597

            Log:
            buildah-1.18.0-3.el9

- remove any LTO CFLAGS to avoid build failure
- Related: #1904567

Signed-off-by: Jindrich Novy <jnovy@redhat.com>

---
diff --git a/buildah.spec b/buildah.spec
index e7d1fd3..ac7083c 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -1,6 +1,9 @@
 %global with_debug 1
 %global with_bundled 1
 
+# https://bugzilla.redhat.com/show_bug.cgi?id=1904567
+%global _lto_cflags %%{nil}
+
 %if 0%{?with_debug}
 %global _find_debuginfo_dwz_opts %{nil}
 %global _dwz_low_mem_die_limit 0
@@ -24,7 +27,7 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl 
 
 Name: buildah
 Version: 1.18.0
-Release: 2%{?dist}
+Release: 3%{?dist}
 Summary: A command line tool used for creating OCI Images
 License: ASL 2.0
 URL: https://%{name}.io
@@ -94,7 +97,7 @@ mv vendor src
 export GOPATH=$(pwd)/_build:$(pwd)
 export BUILDTAGS='seccomp selinux btrfs_noversion exclude_graphdriver_btrfs'
 export GO111MODULE=off
-#export CGO_CFLAGS="%%{optflags} -D_GNU_SOURCE -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64"
+export CGO_CFLAGS="%{optflags} -D_GNU_SOURCE -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64"
 rm -f src/github.com/containers/storage/drivers/register/register_btrfs.go
 %gobuild -o bin/%{name} %{import_path}/cmd/%{name}
 %gobuild -o imgtype %{import_path}/tests/imgtype
@@ -126,6 +129,10 @@ make DESTDIR=%{buildroot} PREFIX=%{_prefix} -C docs install
 %{_datadir}/%{name}/test
 
 %changelog
+* Sat Dec 05 2020 Jindrich Novy <jnovy@redhat.com> - 1.18.0-3
+- remove any LTO CFLAGS to avoid build failure
+- Related: #1904567
+
 * Fri Dec 04 2020 Jindrich Novy <jnovy@redhat.com> - 1.18.0-2
 - do not harden binaries for now given bug in golang, e.g.
   error: variable '_cgoexp_ebd00b0772db_StorageDevmapperLogCallback' redeclared as function