[rpms/buildah] update-buildah-cve-2026-46597: Bump golang.org/x/crypto to v0.53.0 for CVE-2026-46597

[rpms/buildah] update-buildah-cve-2026-46597: Bump golang.org/x/crypto to v0.53.0 for CVE-2026-46597

[Lokesh Mandvekar]

            A new commit has been pushed.

            Repo   : rpms/buildah
            Branch : update-buildah-cve-2026-46597
            Commit : f2109785a85d98be3053648494680c693109e43c
            Author : Lokesh Mandvekar <lsm5@redhat.com>
            Date   : 2026-08-05T14:45:54-04:00
            Stats  : +11/-6 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/buildah/c/f2109785a85d98be3053648494680c693109e43c?branch=update-buildah-cve-2026-46597

            Log:
            Bump golang.org/x/crypto to v0.53.0 for CVE-2026-46597

- Update to release-1.43 branch HEAD (609eb9466)
- Version: 1.43.1 -> 1.43.2
- golang.org/x/crypto v0.43.0 -> v0.53.0 (fixes CVE-2026-46597)
- Resolves: RHEL-219426

---
diff --git a/buildah.spec b/buildah.spec
index 38153fd..1c41ca8 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -11,7 +11,7 @@
 
 %global import_path github.com/containers/buildah
 %global branch release-1.43
-%global commit0 08482e746b5a5d210703df043a783789c20142ee
+%global commit0 609eb94666ebcc0e63c2bbff6943e11f24e7ca76
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 %if %{defined fedora}
@@ -37,10 +37,10 @@ Epoch: 2
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 1.43.1
+Version: 1.43.2
 # The `AND` needs to be uppercase in the License for SPDX compatibility
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
-Release:        4%{?dist}
+Release:        1%{?dist}
 %if %{defined golang_arches_future}
 ExclusiveArch: %{golang_arches_future}
 %else
@@ -49,7 +49,7 @@ ExclusiveArch: aarch64 ppc64le s390x x86_64
 Summary: A command line tool used for creating OCI Images
 URL: https://%{name}.io
 %if 0%{?branch:1}
-Source0: https://gitlab.cee.redhat.com/sustaining-engineering/container-tools/src-git/%{name}/-/archive/%{commit0}/%{branch}-%{shortcommit0}.tar.gz
+Source0: https://gitlab.cee.redhat.com/sustaining-engineering/container-tools/src-git/%{name}/-/archive/%{commit0}/%{name}-%{commit0}.tar.gz
 %else
 Source0: https://%{import_path}/archive/%{commit0}/%{name}-%{version}-%{shortcommit0}.tar.gz
 %endif
@@ -206,6 +206,11 @@ rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/*
 %{_datadir}/%{name}/test
 
 %changelog
+* Tue Aug 04 2026 Lokesh Mandvekar <lsm5@redhat.com> - 2:1.43.2-1
+- Update to release-1.43 branch HEAD (609eb9466)
+- Ensures golang.org/x/crypto v0.53.0 for CVE-2026-46597 fix
+- Resolves: RHEL-219426
+
 * Fri Jul 10 2026 Jindrich Novy <jnovy@redhat.com> - 2:1.43.1-4
 - rebuild for CVE-2026-39822
 - Resolves: RHEL-193645
@@ -214,7 +219,7 @@ rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/*
 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835
 - Resolves: RHEL-188733 RHEL-190066
 
-* Sun May 04 2026 Jindrich Novy <jnovy@redhat.com> - 102:1.43.1-2
+* Mon May 04 2026 Jindrich Novy <jnovy@redhat.com> - 102:1.43.1-2
 - Rebuild for CVE-2026-25679
 - Resolves: RHEL-158759
 

diff --git a/sources b/sources
index ca66eb4..77633e7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (release-1.43-08482e7.tar.gz) = f40f9481af53f8055d573f7c0f7a441cc43eecd3389d4f9612ae0ec619c6cc6a19bcf69abb28c58aa444e8442943e2e274831d6528aeffc48b5da2ca444dd1b9
+SHA512 (buildah-609eb9466b52e047421b7503323065c3b722497c.tar.gz) = 61445e77cc45b383677fb3351cf8b2232ccfa97d9b876d5bcce8525639c86d051b66467cdc4b7730cba103e933b83892d2ec41b1ac3f80015a7b35c8450aa19d