import UBI buildah-1.41.6-1.el9_7

.buildah.metadata

@@ -1 +1 @@
-de524682d204c7adee42f1354a29590d491103b6 SOURCES/release-1.41-ee5b574.tar.gz
+e4544469d805e83899b0e23122d46da4efff27b5 SOURCES/release-1.41-2ece502.tar.gz

.gitignore

@@ -1 +1 @@
-SOURCES/release-1.41-ee5b574.tar.gz
+SOURCES/release-1.41-2ece502.tar.gz

SPECS/buildah.spec

@@ -11,7 +11,7 @@
 
 %global import_path github.com/containers/buildah
 %global branch release-1.41
-%global commit0 ee5b5742b0c5f8c879b140146b93971bb6a0d385
+%global commit0 2ece502d92acf1b3fab0fdf2329c41652440bf40
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 %if %{defined fedora}
@@ -37,10 +37,10 @@ Epoch: 2
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 1.41.4
+Version: 1.41.6
 # The `AND` needs to be uppercase in the License for SPDX compatibility
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
-Release: 3%{?dist}
+Release: 1%{?dist}
 %if %{defined golang_arches_future}
 ExclusiveArch: %{golang_arches_future}
 %else
@@ -193,6 +193,16 @@ rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/*
 %{_datadir}/%{name}/test
 
 %changelog
+* Thu Nov 20 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.41.6-1
+- update to the latest content of https://github.com/containers/buildah/tree/release-1.41
+  (https://github.com/containers/buildah/commit/2ece502)
+- fixes "[Minor Incident] CVE-2025-52881 buildah: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-9.7.z]"
+- Resolves: RHEL-126925
+
+* Thu Nov 20 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.41.4-4
+- rebuild for CVE-2025-58183
+- Resolves: RHEL-125680
+
 * Fri Oct 24 2025 Jan Kaluza <jkaluza@redhat.com> - 2:1.41.4-3
 - fix the TMT tests
 - Related: RHEL-115166