diff --git a/buildah.spec b/buildah.spec
index 2b4c94e..59e2928 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -12,12 +12,12 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl
 
 %global import_path github.com/containers/buildah
 %global branch release-1.33
-%global commit0 fe85f0d771eaf0d4fc5deb7f2e68d18cbfc7c506
+%global commit0 58af1cdf16e3cdcdf2e885b570c1fa5d04857c3a
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 Epoch: 2
 Name: buildah
-Version: 1.33.11
+Version: 1.33.12
 Release: 1%{?dist}
 Summary: A command line tool used for creating OCI Images
 License: ASL 2.0
@@ -136,6 +136,11 @@ make DESTDIR=%{buildroot} PREFIX=%{_prefix} -C docs install
 %{_datadir}/%{name}/test
 
 %changelog
+* Fri Jan 24 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-1
+- update to the latest content of https://github.com/containers/buildah/tree/release-1.33
+  (https://github.com/containers/buildah/commit/58af1cd)
+- Resolves: RHEL-67612
+
 * Tue Oct 29 2024 Jindrich Novy <jnovy@redhat.com> - 2:1.33.11-1
 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
   (https://github.com/containers/buildah/commit/fe85f0d)
diff --git a/sources b/sources
index cb3dc81..b972c06 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (release-1.33-fe85f0d.tar.gz) = 8808aad6ddb05b305a008502b04d8c803690c433d4e9254667e24817a7e18ee00813beaf45c278e2e4a7bd15f5c52e064ebf1625b8b95f2215bd0bcd12650f5a
+SHA512 (release-1.33-58af1cd.tar.gz) = 112f1002ff1ea33f5a13fb30622b618db609e8eee369edcb992c9f549fc689bfeaba87eac93127d9671d6b4bf79092980c4b4b38e7f67e3598035e7db7251e7e