This Red Hat security advisory (RHSA-2025:4238) addresses multiple security and bug fixes in Red Hat Ceph Storage 6.1, including fixes for vulnerabilities CVE-2024-47191 and CVE-2024-48916. These vulnerabilities relate to path traversal and insufficient verification of data authenticity, as indicated by CWE-22 and CWE-345. The advisory does not provide detailed technical descriptions or CVSS metrics but highlights the importance of applying the update to mitigate these issues. The update also resolves various bugs affecting Ceph components such as ceph-mon, cephadm, RGW, and cephfs. No active exploitation has been reported. The vendor directs users to the official release notes for detailed information and provides guidance on applying the update.

The vulnerabilities addressed could allow unauthorized access or manipulation of data due to path traversal or insufficient verification of data authenticity. This may lead to potential security breaches or data integrity issues in Red Hat Ceph Storage environments. The advisory classifies the severity as high but does not report any known active exploitation in the wild. The update mitigates these risks by fixing the underlying security flaws and other related bugs.

A security update for Red Hat Ceph Storage 6.1 is available and should be applied. Users must ensure that all previously released errata relevant to their systems are installed before applying this update. The vendor provides detailed instructions for applying the update and recommends consulting the Red Hat Ceph Storage 6.1 release notes for significant changes. No additional mitigation steps are indicated beyond applying the official patch.