[rpms/buildah] update-buildah-cve-2026-46597: buildah-1.43.1-1.el9_8

[rpms/buildah] update-buildah-cve-2026-46597: buildah-1.43.1-1.el9_8

[Jindrich Novy]

            A new commit has been pushed.

            Repo   : rpms/buildah
            Branch : update-buildah-cve-2026-46597
            Commit : f0c04700399955e5c18c409cb94559d2f9436337
            Author : Jindrich Novy <jnovy@redhat.com>
            Date   : 2026-04-16T10:30:39+02:00
            Stats  : +9/-4 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/buildah/c/f0c04700399955e5c18c409cb94559d2f9436337?branch=update-buildah-cve-2026-46597

            Log:
            buildah-1.43.1-1.el9_8

- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035

Signed-off-by: Jindrich Novy <jnovy@redhat.com>

---
diff --git a/buildah.spec b/buildah.spec
index 85e3fc2..af0a9e5 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -11,7 +11,7 @@
 
 %global import_path github.com/containers/buildah
 %global branch release-1.43
-%global commit0 bbc4bd12f4fc659b7d8f3abb790a2c25b00f33a3
+%global commit0 c6eb14c2b812c3fcca6a2efedac27bbde5ad7af8
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 %if %{defined fedora}
@@ -37,10 +37,10 @@ Epoch: 2
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 1.43.0
+Version: 1.43.1
 # The `AND` needs to be uppercase in the License for SPDX compatibility
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
-Release: 3%{?dist}
+Release: 1%{?dist}
 %if %{defined golang_arches_future}
 ExclusiveArch: %{golang_arches_future}
 %else
@@ -206,6 +206,11 @@ rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/*
 %{_datadir}/%{name}/test
 
 %changelog
+* Thu Apr 16 2026 Jindrich Novy <jnovy@redhat.com> - 2:1.43.1-1
+- update to https://github.com/containers/buildah/releases/tag/v1.43.1
+- fixes CVE-2026-34986
+- Resolves: RHEL-165035
+
 * Tue Apr 07 2026 Jindrich Novy <jnovy@redhat.com> - 2:1.43.0-3
 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43
   (https://github.com/containers/buildah/commit/bbc4bd1)

diff --git a/sources b/sources
index 1fbd1ae..033ff63 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (release-1.43-bbc4bd1.tar.gz) = a5b61a82efb037d07e7b4344f9aa240228b991b42267746137d909188839ee551e338a0a68bc7acda68a7b2972b8d721c7126a217728fe991fcbc12de28be9ea
+SHA512 (release-1.43-c6eb14c.tar.gz) = 39a271ea0179c0ac9479aeb14558d43ddeebe663026c73203dc3bc490f6929889db7b445ac2911df83a91b5708775a100576dd333fc32ed21932a080d220a6a1