diff --git a/buildah.spec b/buildah.spec
index 282d67c1805e8bf8ba53327b99bb6c3823c3e902..b0cd076679ed0d431ff5ae13fcfcbf60c2d88aa7 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -3,9 +3,9 @@
 
 Summary:       A command line tool used for creating OCI Images
 Name:          buildah
-Version:       1.41.4
-Release:       4%{?dist}
-License:       ASL 2.0
+Version:       1.43.1
+Release:       3%{?dist}
+License:       Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
 URL:           https://%{name}.io
 Source0:       https://%{import_path}/archive/refs/tags/v%{version}.tar.gz
 
@@ -14,6 +14,8 @@ BuildRequires: go-md2man golang >= 1.24.4 go-rpm-macros
 BuildRequires: device-mapper-devel libassuan-devel
 BuildRequires: gpgme-devel libassuan-devel ostree-devel
 BuildRequires: libseccomp-devel
+BuildRequires: shadow-utils-subid-devel
+BuildRequires: sqlite-devel
 Requires:      containers-common-extra libseccomp
 
 %description
@@ -57,7 +59,7 @@ cd ..
 mv vendor src
 
 export GOPATH=$(pwd)/_build:$(pwd)
-export BUILDTAGS='seccomp selinux btrfs_noversion exclude_graphdriver_btrfs'
+export BUILDTAGS='seccomp selinux btrfs_noversion exclude_graphdriver_btrfs libsqlite3'
 export GO111MODULE=off
 export CGO_CFLAGS="%{optflags} -D_GNU_SOURCE -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64"
 export CNI_VERSION=`grep '^# github.com/containernetworking/cni ' src/modules.txt | sed 's,.* ,,'`
@@ -68,6 +70,11 @@ rm -f src/github.com/containers/storage/drivers/register/register_btrfs.go
 %gobuild -o imgtype %{import_path}/tests/imgtype
 %gobuild -o bin/copy %{import_path}/tests/copy
 %gobuild -o bin/tutorial %{import_path}/tests/tutorial
+%gobuild -o bin/inet %{import_path}/tests/inet
+%gobuild -o bin/dumpspec %{import_path}/tests/dumpspec
+%gobuild -o bin/passwd %{import_path}/tests/passwd
+%gobuild -o bin/crash %{import_path}/tests/crash
+%gobuild -o bin/wait %{import_path}/tests/wait
 GOMD2MAN=go-md2man %{__make} -C docs
 
 
@@ -81,6 +88,11 @@ cp -pav tests/. %{buildroot}/%{_datadir}/%{name}/test/system
 cp imgtype %{buildroot}/%{_bindir}/%{name}-imgtype
 cp bin/copy    %{buildroot}/%{_bindir}/%{name}-copy
 cp bin/tutorial %{buildroot}/%{_bindir}/%{name}-tutorial
+cp bin/inet     %{buildroot}/%{_bindir}/%{name}-inet
+cp bin/dumpspec %{buildroot}/%{_bindir}/%{name}-dumpspec
+cp bin/passwd %{buildroot}/%{_bindir}/%{name}-passwd
+cp bin/crash %{buildroot}/%{_bindir}/%{name}-crash
+cp bin/wait %{buildroot}/%{_bindir}/%{name}-wait
 
 
 %files
@@ -98,10 +110,27 @@ cp bin/tutorial %{buildroot}/%{_bindir}/%{name}-tutorial
 %{_bindir}/%{name}-imgtype
 %{_bindir}/%{name}-copy
 %{_bindir}/%{name}-tutorial
+%{_bindir}/%{name}-inet
+%{_bindir}/%{name}-dumpspec
+%{_bindir}/%{name}-passwd
+%{_bindir}/%{name}-crash
+%{_bindir}/%{name}-wait
 %{_datadir}/%{name}/test
 
 
 %changelog
+* Wed Apr 29 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 1.43.1-3
+- [Type] security
+- [DESC] Fix CVE-2025-58181, CVE-2025-47914
+
+* Wed Apr 29 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 1.43.1-2
+- [Type] security
+- [DESC] Fix Issue#IJH43S, CVE-2025-58181, CVE-2025-47914
+
+* Tue Apr 29 2025 hudson zhu <hudsonzhu@tencent.com> - 1.43.1-1
+- [Type] sync
+- [DESC] upgrade to 1.43.1
+
 * Mon Dec 8 2025 hudson zhu <hudsonzhu@tencent.com> - 1.41.4-4
 - [Type] security
 - [DESC] Fix [CVE-2025-61724], [CVE-2025-58187], [CVE-2025-58183], [CVE-2025-58186], [CVE-2025-58189], [CVE-2025-61725], [CVE-2025-58185] and [CVE-2025-61723]
diff --git a/sources b/sources
index 3db3d7e16546b1f667d9cc45544563b6f4c9c15c..48bc2cb94f13506251877acd73afa110ad0c1d1c 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v1.41.4.tar.gz) = a2f4d7654293baf4267293b33f9a559f9e027bcde816d6a0690f8b9df4256f4989f27331fe6fede98a6e676e3d34a706ef0fb468085afc728aea4c0ea968636c
+SHA512 (v1.43.1.tar.gz) = 5c0230011c40522bfc87a5dbb6a8a2dfa0ee3f47625dd7782b53273bba75ecfc881412567e68520f593017f11cc3e0483a9f0bfb6d5ecd8bb9ee6f278936e8b0