MiracleLinux 9 : buildah-1.33.7-2.el9_4 (AXSA:2024-8286:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8286:05 advisory. golang: net/http: memory exhaustion in Request.ParseMultipartForm CVE-2023-45290 jose-go: improper handling of highly compressed data CVE-2024-28180...

CVE-2024-28180 affecting package buildah for versions less than 1.41.4-2

CVE-2024-28180 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...