RHSA-2026:26568 - Security Advisory

Topic

A new version of OpenShift API for Data Protection (OADP) is now available.

Description

OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

Affected Products

• OpenShift API for Data Protection

Fixes

• BZ - 2445345
• BZ - 2445356
• BZ - 2449833
• BZ - 2452076
• BZ - 2452271
• BZ - 2455470
• BZ - 2456333
• BZ - 2456335
• BZ - 2456336
• BZ - 2456339
• OADP-7017 - DPA goes in error state when node affinity is specified with podConfig
• OADP-7543 - Windows VM backup procedures blocked with QuiesceFailed errors
• OADP-7562 - OADP Operator incorrectly appends default resources to excludedClusterScopedResources when a wildcard * is present, causing FailedValidation.
• OADP-7883 - OADP-1.5 - Add DPA option to disable/configure CSI snapshot early frequent polling (velero csi-snapshot-early-frequent-polling)

CVEs

• CVE-2026-25679
• CVE-2026-27137
• CVE-2026-32280
• CVE-2026-32281
• CVE-2026-32282
• CVE-2026-33186
• CVE-2026-33747
• CVE-2026-33748
• CVE-2026-33810
• CVE-2026-34986

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore