RHSA-2026:66022 - Security Advisory

Topic

A new version of OpenShift API for Data Protection (OADP) is now available.

Description

OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

Affected Products

• OpenShift API for Data Protection

Fixes

• BZ - 2456338
• BZ - 2467809
• BZ - 2467820
• BZ - 2467822
• BZ - 2480675
• BZ - 2480678
• BZ - 2480680
• BZ - 2480681
• BZ - 2480683
• BZ - 2480684
• BZ - 2480687
• BZ - 2480688
• BZ - 2480689
• BZ - 2480756
• BZ - 2480757
• BZ - 2480761
• BZ - 2480762
• BZ - 2483894
• BZ - 2484204
• BZ - 2484207
• BZ - 2484830
• BZ - 2495815
• BZ - 2496130
• BZ - 2503746
• BZ - 2504233
• BZ - 2511475
• BZ - 2515815
• BZ - 2515820
• BZ - 2515827
• BZ - 2515838
• BZ - 2515839
• BZ - 2515840
• BZ - 2519913
• OADP-6669 - Bucket credentials need to be explicity specified in DPA in case of CloudStorageRef configuration
• OADP-7560 - OVN annotation causing connectivity issues after restore
• OADP-8332 - OADP-1.5 - Backup hooks are skipped on Pods included via AdditionalItems when using labelSelector
• OADP-8454 - CLONE - cli: Ensure that the each workload Pod is configured to use a valid Service Account
• OADP-8455 - CLONE - OADP cli: Ensures that a workload does not utilize RoleBinding(s) in a non-workload Namespace.
• OADP-8462 - CLONE - [4.17] NetworkAttachmentDefinitions aren't backed up as part of VM backups
• OADP-8486 - OADP-1.5 cli - Lifecycle-liveness/readiness/startup-probe Create probes for cli / vmd

CVEs

• CVE-2026-15792
• CVE-2026-25681
• CVE-2026-27136
• CVE-2026-27145
• CVE-2026-32283
• CVE-2026-33811
• CVE-2026-33818
• CVE-2026-39820
• CVE-2026-39821
• CVE-2026-39828
• CVE-2026-39829
• CVE-2026-39830
• CVE-2026-39831
• CVE-2026-39833
• CVE-2026-39835
• CVE-2026-41178
• CVE-2026-42499
• CVE-2026-42502
• CVE-2026-42504
• CVE-2026-42508
• CVE-2026-44740
• CVE-2026-46595
• CVE-2026-46597
• CVE-2026-53488
• CVE-2026-53492
• CVE-2026-56852
• CVE-2026-56853
• CVE-2026-56858
• CVE-2026-56859
• CVE-2026-56860
• CVE-2026-56862
• CVE-2026-71235
• CVE-2026-75593

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore