This advisory covers security updates for Red Hat Ceph Storage container images, which are based on the latest ubi9 base image and Ceph 7.1. Among the fixed vulnerabilities is CVE-2025-45582, a flaw in GNU Tar that allows an attacker to exploit directory traversal via symbolic links in multiple TAR archives extracted in the same directory. This can result in unauthorized file modification or privilege escalation. The advisory references multiple CVEs and bug fixes and provides updated container images downloadable from the Red Hat container registry. No explicit CVSS score is provided by Red Hat for CVE-2025-6069, but the overall severity is rated high.

The vulnerabilities fixed in this update can lead to unauthorized modification of files on systems running affected versions of Red Hat Ceph Storage. Specifically, the GNU Tar flaw allows an attacker to bypass directory traversal protections when extracting multiple TAR archives, potentially overwriting critical system files or escalating privileges. This can compromise system integrity and confidentiality.

Red Hat has released updated container images that address these vulnerabilities. Users should download and deploy the updated images from the Red Hat container registry using the 'podman pull' command. For the GNU Tar vulnerability, untrusted TAR archives should always be extracted in an empty directory, and the same directory must not be reused for extracting multiple untrusted archives without first removing all previously extracted content. Patch status is confirmed by the vendor advisory indicating an official fix is available.