[rpms/buildah] update-buildah-cve-2026-46597: buildah-1.39.0-3.el9

[rpms/buildah] update-buildah-cve-2026-46597: buildah-1.39.0-3.el9

[Jindrich Novy]

            A new commit has been pushed.

            Repo   : rpms/buildah
            Branch : update-buildah-cve-2026-46597
            Commit : 95c534e8feeb07b5cd3a9251f7e172166306d5db
            Author : Jindrich Novy <jnovy@redhat.com>
            Date   : 2025-02-24T12:03:47+01:00
            Stats  : +6/-2 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/buildah/c/95c534e8feeb07b5cd3a9251f7e172166306d5db?branch=update-buildah-cve-2026-46597

            Log:
            buildah-1.39.0-3.el9

- Add CNI explicitly in BUILDTAGS
- Resolves: RHEL-80396

Signed-off-by: Jindrich Novy <jnovy@redhat.com>

---
diff --git a/buildah.spec b/buildah.spec
index 47c489c..d345256 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -35,7 +35,7 @@ Epoch: 2
 Version: 1.39.0
 # The `AND` needs to be uppercase in the License for SPDX compatibility
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
-Release: 2%{?dist}
+Release: 3%{?dist}
 %if %{defined golang_arches_future}
 ExclusiveArch: %{golang_arches_future}
 %else
@@ -119,7 +119,7 @@ export CGO_CFLAGS+=" -m64 -mtune=generic -fcf-protection=full"
 export CNI_VERSION=`grep '^# github.com/containernetworking/cni ' src/modules.txt | sed 's,.* ,,'`
 export LDFLAGS="-X main.buildInfo=`date +%s` -X main.cniVersion=${CNI_VERSION}"
 
-export BUILDTAGS="seccomp $(hack/systemd_tag.sh) $(hack/libsubid_tag.sh)"
+export BUILDTAGS="cni seccomp $(hack/systemd_tag.sh) $(hack/libsubid_tag.sh)"
 %if !%{defined build_with_btrfs}
 export BUILDTAGS+=" btrfs_noversion exclude_graphdriver_btrfs"
 %endif
@@ -171,6 +171,10 @@ rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/*
 %{_datadir}/%{name}/test
 
 %changelog
+* Mon Feb 24 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.39.0-3
+- Add CNI explicitly in BUILDTAGS
+- Resolves: RHEL-80396
+
 * Thu Feb 13 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.39.0-2
 - sync spec with upstream
 - Related: RHEL-60277