Red Hat Security Advisory: Red Hat Ceph Storage 8.0 security, bug fix, and enhancement updates
Red Hat Ceph Storage 8.0 has received a security advisory addressing multiple security, bug fixes, and enhancements. The advisory includes a fix for CVE-2024-47191, which is associated with a CWE-22 vulnerability. The update is part of a broader package of improvements and fixes documented in the Red Hat Ceph Storage 8.0 release notes. No specific CVSS score is provided for CVE-2024-47191. Users are advised to apply the update after ensuring all previous errata are applied.
AI Analysis
Technical Summary
This advisory covers Red Hat Ceph Storage 8.0 and includes a security fix for CVE-2024-47191, related to CWE-22 (Path Traversal). The update also contains numerous bug fixes and enhancements across the platform, including fixes for memory leaks, crashes, and other stability issues. The vendor advisory does not provide a CVSS score or detailed technical exploitation information. The advisory directs users to the official release notes for detailed changes and instructs to apply all prior errata before updating.
Potential Impact
The vulnerability CVE-2024-47191 is classified as CWE-22, indicating a path traversal issue, which can potentially allow unauthorized access to files or directories outside the intended scope. The severity is rated as high by the source, but no active exploits are known in the wild. The update also addresses multiple stability and functionality issues that could impact system reliability and performance.
Mitigation Recommendations
A security update for Red Hat Ceph Storage 8.0 is available and should be applied. Users must ensure all previously released errata relevant to their system are installed before applying this update. The vendor manages remediation through official patches, and detailed update instructions are available in the Red Hat advisory and knowledge base articles. No indication is given that no action is required or that the issue is already mitigated without patching.
Red Hat Security Advisory: Red Hat Ceph Storage 8.0 security, bug fix, and enhancement updates
Description
Red Hat Ceph Storage 8.0 has received a security advisory addressing multiple security, bug fixes, and enhancements. The advisory includes a fix for CVE-2024-47191, which is associated with a CWE-22 vulnerability. The update is part of a broader package of improvements and fixes documented in the Red Hat Ceph Storage 8.0 release notes. No specific CVSS score is provided for CVE-2024-47191. Users are advised to apply the update after ensuring all previous errata are applied.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers Red Hat Ceph Storage 8.0 and includes a security fix for CVE-2024-47191, related to CWE-22 (Path Traversal). The update also contains numerous bug fixes and enhancements across the platform, including fixes for memory leaks, crashes, and other stability issues. The vendor advisory does not provide a CVSS score or detailed technical exploitation information. The advisory directs users to the official release notes for detailed changes and instructs to apply all prior errata before updating.
Potential Impact
The vulnerability CVE-2024-47191 is classified as CWE-22, indicating a path traversal issue, which can potentially allow unauthorized access to files or directories outside the intended scope. The severity is rated as high by the source, but no active exploits are known in the wild. The update also addresses multiple stability and functionality issues that could impact system reliability and performance.
Mitigation Recommendations
A security update for Red Hat Ceph Storage 8.0 is available and should be applied. Users must ensure all previously released errata relevant to their system are installed before applying this update. The vendor manages remediation through official patches, and detailed update instructions are available in the Red Hat advisory and knowledge base articles. No indication is given that no action is required or that the issue is already mitigated without patching.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:3635
- Cve Count
- 1
Threat ID: 6a85b4c7acd9273b49252827
Added to database: 08/19/2026, 13:51:03 UTC
Last enriched: 08/19/2026, 14:36:56 UTC
Last updated: 09/10/2026, 19:38:44 UTC
Views: 48
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.