From e57ecb4158bad5647740f999937846e1dcdf73f1 Mon Sep 17 00:00:00 2001
From: eabdullin <ed.abdullin.1@gmail.com>
Date: Tue, 17 Jun 2025 05:19:05 +0000
Subject: [PATCH] import UBI buildah-1.39.4-2.el10_0

---
 buildah.spec | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/buildah.spec b/buildah.spec
index 29cdaf3..88ed7e9 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -31,7 +31,7 @@ Epoch: 2
 Version: 1.39.4
 # The `AND` needs to be uppercase in the License for SPDX compatibility
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
-Release: 1%{?dist}
+Release: 2%{?dist}
 %if %{defined golang_arches_future}
 ExclusiveArch: %{golang_arches_future}
 %else
@@ -163,6 +163,10 @@ rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/*
 %{_datadir}/%{name}/test
 
 %changelog
+* Wed Jun 04 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.39.4-2
+- rebuild to fix CVE-2025-22871 buildah: Request smuggling due to acceptance of invalid chunked data in net/http
+- Resolves: RHEL-89205
+
 * Fri Mar 28 2025 Jindrich Novy <jnovy@redhat.com> - 2:1.39.4-1
 - update to https://github.com/containers/buildah/releases/tag/v1.39.4
 - Resolves: RHEL-85115