# 4.21.39

Created: 2026-10-16 13:22:06 +0000 UTC

Image Digest: `sha256:013f4512c7bbbb61f9490824e6997b451f2d4355013d8db4ea21ff4a03d72951`


## Changes from 4.21.38

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.9
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0


### Rebuilt images without code change

* [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui) git [e9c2917a](https://github.com/openshift-assisted/assisted-installer-ui/commit/e9c2917ad243c175e5376acd85ec148c71cdada3) `sha256:a14477cb24a5c42da761502d303be104f6cadd2daa333f5aa08ab6e53c0fd9e0`
* [console](https://github.com/openshift/console) git [2f1997ab](https://github.com/openshift/console/commit/2f1997abe650fbe9de360a061360c5fc0a67f6d9) `sha256:c0f2aada9ecf348634b9aee6f51715d0a3c971f8afad50eebbc5b0a80ec757f0`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:230fb420fe599519e1b2cb776acadab6efe71d411ba7939398620d145bb43107`
* [keepalived-ipfailover](https://github.com/openshift/images) git [f0241a3d](https://github.com/openshift/images/commit/f0241a3d2a12a8b2965cc36542babce8a1dffcf8) `sha256:e2e36153acdf08c312c8f6511d44eea162b419d49e6b7b715b36c809ac4d0eaa`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:716b3034a4ff7d32e753b081ece1eed2d702128119b2a239d501358531fa6de6`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [a39d7c99](https://github.com/openshift/monitoring-plugin/commit/a39d7c998df44b47b48b8a60b593f077b7af489d) `sha256:9733d4498c5fa9c9dbe7cba2ff1fc7b54c8e00bb4911e516fe27b16fb2592c44`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [cdf3a589](https://github.com/openshift/networking-console-plugin/commit/cdf3a58985ac0deb76ef2f23cd78dd2920ada284) `sha256:bb207e519f050d5f27894a339fb7ca415448d94d08914202c0a5021374511532`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [aa20150b](https://github.com/openshift/oc-mirror/commit/aa20150b0dfe6d3c5255570b45f14c8ee18f22b7) `sha256:52f0c8b13a4e41da13375ebd41d6144fdd44496897c2e66efa33116fe6c0f84b`
* [rhel-coreos](https://github.com/openshift/os) git [b3f3bce7](https://github.com/openshift/os/commit/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e) `sha256:54951049f75d2c941d59476dcb8e9f84e0257d2419335aac83f7434f8294e70e`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [b3f3bce7](https://github.com/openshift/os/commit/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e) `sha256:e6ce0a5ed6956a2e45d06c7c31ef59f5b589f7d32b93534f53b26b6223258451`


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/e5f0dc03f4dd4db98f635705b8b4fee4ad6c482b)

* [OCPBUGS-104122](https://issues.redhat.com/browse/OCPBUGS-104122): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#206](https://github.com/openshift/machine-api-provider-aws/pull/206)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/116192b6d78b0f62f8ca111a9fd4d2eb4324bc5f...e5f0dc03f4dd4db98f635705b8b4fee4ad6c482b)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/37c23eebf1ae5833fb66c8bff57740f8c0d45603)

* [OCPBUGS-130583](https://issues.redhat.com/browse/OCPBUGS-130583): Added global overrides for OVN-Kubernetes [#3192](https://github.com/openshift/cluster-network-operator/pull/3192)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/bd4ada0046efe2f4ec12aac7ce1f555c9e510830...37c23eebf1ae5833fb66c8bff57740f8c0d45603)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/72abb01aca3ca72d1f64328ef07b0cafd34e1f5e)

* [OCPBUGS-127955](https://issues.redhat.com/browse/OCPBUGS-127955): Replace golang.org/x/net with sustaining_fork version to resolve CVE-2026-39821 (release-4.21) [#166](https://github.com/openshift/kube-rbac-proxy/pull/166)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/cd636680e06a55395c26570dff0cb37277014388...72abb01aca3ca72d1f64328ef07b0cafd34e1f5e)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/10415bfe1d1fd2e951a3655ba6c8230025ab9c0f)

* [OCPBUGS-130778](https://issues.redhat.com/browse/OCPBUGS-130778): backport kube-state-metrics 2.18 memory leak fix [#199](https://github.com/openshift/kube-state-metrics/pull/199)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/3b77935dcf45ac9a6772259d8120889b95a5f02a...10415bfe1d1fd2e951a3655ba6c8230025ab9c0f)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/2ae316fed5fbfee4cf00f4a96f24e43afe6e7b0e)

* [OCPBUGS-129667](https://issues.redhat.com/browse/OCPBUGS-129667): Boot image controller skips MachineSets that don't match any failure domain [#6642](https://github.com/openshift/machine-config-operator/pull/6642)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b13ad2aab188dc77776734da29afbf904f8b5006...2ae316fed5fbfee4cf00f4a96f24e43afe6e7b0e)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/be0f1245247b93fd92c4481cbb01a810d4fa368b)

* [OCPBUGS-104165](https://issues.redhat.com/browse/OCPBUGS-104165): Use patched x/net fork v0.50.0-sec.4 [#460](https://github.com/openshift/openshift-controller-manager/pull/460)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/438d52e79d691e016d66eabfe9a53c84229db40c...be0f1245247b93fd92c4481cbb01a810d4fa368b)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/ade3050b01d89ebdbfdfc132f5a3c24b04c27079)

* NO-JIRA: REVERT-ME: Precreate CDN gateway topology before NAD/UDN sync [#3519](https://github.com/openshift/ovn-kubernetes/pull/3519)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/6ed5a191495fb937d888d2dc60293f9e88fadaf3...ade3050b01d89ebdbfdfc132f5a3c24b04c27079)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/c393015c7fc110d393aa9f4a32450b3c55d207f8)

* [OCPBUGS-101468](https://issues.redhat.com/browse/OCPBUGS-101468), [OCPBUGS-104164](https://issues.redhat.com/browse/OCPBUGS-104164), [OCPBUGS-91239](https://issues.redhat.com/browse/OCPBUGS-91239), [OCPBUGS-96559](https://issues.redhat.com/browse/OCPBUGS-96559): Bump x/net to address CVEs [#116](https://github.com/openshift/cloud-provider-powervs/pull/116)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/40d1c0adfedeca36498a5d93d69aee96831c756d...c393015c7fc110d393aa9f4a32450b3c55d207f8)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/1ac19f4dfc00a4e60c2c38e8944b7a2cb27e6101)

* [OCPBUGS-104210](https://issues.redhat.com/browse/OCPBUGS-104210): Bump golang.org/x/net to github.com/openshift-sustaining/net v0.50.0-sec.4 CVE-2026-33814 [release-4.21] [#127](https://github.com/openshift/cluster-api-provider-vsphere/pull/127)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/3adfe2b56b259b2d27906d8772354f817e338da5...1ac19f4dfc00a4e60c2c38e8944b7a2cb27e6101)