diff --git a/buildah.spec b/buildah.spec
index 792985e..fbbf0d4 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -12,13 +12,13 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl
 
 %global import_path github.com/containers/buildah
 %global branch release-1.33
-%global commit0 f843563df89a838b97450b3ceb777a5fab75569c
+%global commit0 b95e96247df1c233f23f07aad37b25f5118a4f47
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 Epoch: 2
 Name: buildah
-Version: 1.33.6
-Release: 2%{?dist}
+Version: 1.33.7
+Release: 1%{?dist}
 Summary: A command line tool used for creating OCI Images
 License: ASL 2.0
 URL: https://%{name}.io
@@ -136,6 +136,11 @@ make DESTDIR=%{buildroot} PREFIX=%{_prefix} -C docs install
 %{_datadir}/%{name}/test
 
 %changelog
+* Thu Mar 21 2024 Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
+- update to the latest content of https://github.com/containers/buildah/tree/release-1.33
+  (https://github.com/containers/buildah/commit/b95e962)
+- Resolves: RHEL-28224
+
 * Mon Feb 26 2024 Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-2
 - update tags for systemd libsubid
 - Resolves: RHEL-26594
diff --git a/sources b/sources
index 7c55624..668e057 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (release-1.33-f843563.tar.gz) = 355ff86d0dbd4379d145e4cc44ea53f52c602a3d56e54de7e261f64e1a2974b96b249ab90b66b80d0a36068f745a81760dbef7422c43c8e05a3ec34c5d4deaeb
+SHA512 (release-1.33-b95e962.tar.gz) = 9db00192738b9c57bfb7f75b93e426081a32d7ee4035c0e6b366721f0dcc42fe2ea240d3bd0908ad98d7467b0cd216623e1dbe97548c8c118190a438933f0b60