[rpms/buildah] update-buildah-cve-2026-46597: buildah-1.43.0-3.el9_8

[rpms/buildah] update-buildah-cve-2026-46597: buildah-1.43.0-3.el9_8

[Jindrich Novy]

            A new commit has been pushed.

            Repo   : rpms/buildah
            Branch : update-buildah-cve-2026-46597
            Commit : b567f5eb4bb9f4479fb39ed4b251aef7475fb5cf
            Author : Jindrich Novy <jnovy@redhat.com>
            Date   : 2026-04-07T10:13:47+02:00
            Stats  : +22/-5 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/buildah/c/b567f5eb4bb9f4479fb39ed4b251aef7475fb5cf?branch=update-buildah-cve-2026-46597

            Log:
            buildah-1.43.0-3.el9_8

- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964

Signed-off-by: Jindrich Novy <jnovy@redhat.com>

---
diff --git a/buildah.spec b/buildah.spec
index 8a4ff96..85e3fc2 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -9,6 +9,11 @@
 
 %global gomodulesmode GO111MODULE=on
 
+%global import_path github.com/containers/buildah
+%global branch release-1.43
+%global commit0 bbc4bd12f4fc659b7d8f3abb790a2c25b00f33a3
+%global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
+
 %if %{defined fedora}
 %define build_with_btrfs 1
 %endif
@@ -35,7 +40,7 @@ Epoch: 2
 Version: 1.43.0
 # The `AND` needs to be uppercase in the License for SPDX compatibility
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
-Release: 2%{?dist}
+Release: 3%{?dist}
 %if %{defined golang_arches_future}
 ExclusiveArch: %{golang_arches_future}
 %else
@@ -43,8 +48,11 @@ ExclusiveArch: aarch64 ppc64le s390x x86_64
 %endif
 Summary: A command line tool used for creating OCI Images
 URL: https://%{name}.io
-# Tarball fetched from upstream
-Source: %{git0}/archive/v%{version}.tar.gz
+%if 0%{?branch:1}
+Source0: https://%{import_path}/tarball/%{commit0}/%{branch}-%{shortcommit0}.tar.gz
+%else
+Source0: https://%{import_path}/archive/%{commit0}/%{name}-%{version}-%{shortcommit0}.tar.gz
+%endif
 BuildRequires: device-mapper-devel
 BuildRequires: git-core
 BuildRequires: golang >= 1.16.6
@@ -108,7 +116,11 @@ Requires: git-daemon
 This package contains system tests for %{name}
 
 %prep
-%autosetup -Sgit -n %{name}-%{version}
+%if 0%{?branch:1}
+%autosetup -Sgit -n containers-%{name}-%{shortcommit0}
+%else
+%autosetup -Sgit -n %{name}-%{commit0}
+%endif
 
 %build
 %set_build_flags
@@ -194,6 +206,11 @@ rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/*
 %{_datadir}/%{name}/test
 
 %changelog
+* Tue Apr 07 2026 Jindrich Novy <jnovy@redhat.com> - 2:1.43.0-3
+- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
+  (https://github.com/containers/buildah/commit/bbc4bd1)
+- Resolves: RHEL-95964
+
 * Mon Feb 23 2026 Jindrich Novy <jnovy@redhat.com> - 2:1.43.0-2
 - Rebuild for new golang to address CVE-2025-61726
 - Resolves: RHEL-146099

diff --git a/sources b/sources
index 3553206..1fbd1ae 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v1.43.0.tar.gz) = 603ad143b3f472d814d058507669668f685434f24aa1d904daceac51e7b5a7d1719e1cae64fa47a6c1be32a3fb1f40dc3a094fe193056cc7a775b9a5b4f519bc
+SHA512 (release-1.43-bbc4bd1.tar.gz) = a5b61a82efb037d07e7b4344f9aa240228b991b42267746137d909188839ee551e338a0a68bc7acda68a7b2972b8d721c7126a217728fe991fcbc12de28be9ea