diff --git a/buildah.spec b/buildah.spec
index 999b7e5..240a42e 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -9,13 +9,13 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl
 
 %global import_path github.com/containers/buildah
 %global branch release-1.28
-%global commit0 7e4d9dd3a92fe092d118892d8667cc496711cd10
+%global commit0 cfefbb64ea1fe3639c231f73e7b09bfe300744ac
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 Epoch: 1
 Name: buildah
 Version: 1.28.2
-Release: 2%{?dist}
+Release: 3%{?dist}
 Summary: A command line tool used for creating OCI Images
 License: ASL 2.0
 URL: https://%{name}.io
@@ -133,6 +133,12 @@ make DESTDIR=%{buildroot} PREFIX=%{_prefix} -C docs install
 %{_datadir}/%{name}/test
 
 %changelog
+* Mon Jan 09 2023 Jindrich Novy <jnovy@redhat.com> - 1:1.28.2-3
+- update to the latest content of https://github.com/containers/buildah/tree/release-1.28
+  (https://github.com/containers/buildah/commit/cfefbb6)
+- fixes segmentation fault on s390x
+- Resolves: #2150429
+
 * Wed Dec 07 2022 Jindrich Novy <jnovy@redhat.com> - 1:1.28.2-2
 - update to the latest content of https://github.com/containers/buildah/tree/release-1.28
   (https://github.com/containers/buildah/commit/7e4d9dd)
diff --git a/sources b/sources
index c7b62a2..cb764ff 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (release-1.28-7e4d9dd.tar.gz) = 02a60cbddf6c7c80aa8f9691ac83a0d88bb9a63bc099d267d299110e038011ce22005c1c50c536b4ad7265489ad0f63e691688aec2c4693692b8a1a94a25c227
+SHA512 (release-1.28-cfefbb6.tar.gz) = c9012a574d76d2a5389262a12bf93709bff99572da5f0b159836202f5668ebc1bd1f1aa1e33c3df7940d9b9a4543faa5605a3624cef6f6233486b815c5a3f255