# 4.21.39

Created: 2026-10-16 13:32:03 +0000 UTC

Image Digest: `sha256:1ffb62c69b1cb292b94b66080d96f79ce7af88ecf8c3533a8b76f7c8ef9aa1e9`


## Changes from 4.21.38

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.9
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0


### Rebuilt images without code change

* [console](https://github.com/openshift/console) git [2f1997ab](https://github.com/openshift/console/commit/2f1997abe650fbe9de360a061360c5fc0a67f6d9) `sha256:961617e592694c0f37eae853fbf691dab984dbcb457506df47be42208c31f99c`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:eab4e90646008bf5fcd703a71c7eed09213653b2de8b49fc87895408e02be152`
* [keepalived-ipfailover](https://github.com/openshift/images) git [f0241a3d](https://github.com/openshift/images/commit/f0241a3d2a12a8b2965cc36542babce8a1dffcf8) `sha256:b178cd4aa16d4923d1429bb98699395403cfedc0ecf3a66f3fe548878fddb21c`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:9db386d70af9564d548436234f19e72d1940445678b481d145dd474c3eefa979`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [a39d7c99](https://github.com/openshift/monitoring-plugin/commit/a39d7c998df44b47b48b8a60b593f077b7af489d) `sha256:0f2cd97f715b3751c4282e1399cef6f3628b8030c37b0a16179c4ba30306a085`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [cdf3a589](https://github.com/openshift/networking-console-plugin/commit/cdf3a58985ac0deb76ef2f23cd78dd2920ada284) `sha256:0ac12652c8066e95b59721ff971c56a464ae871d79629dd02430b6151e6c0ca5`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [aa20150b](https://github.com/openshift/oc-mirror/commit/aa20150b0dfe6d3c5255570b45f14c8ee18f22b7) `sha256:40fc6a933228a58a6580eb652ecdf1c20513542dc016ad8772adf1b23d939041`
* [rhel-coreos](https://github.com/openshift/os) git [b3f3bce7](https://github.com/openshift/os/commit/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e) `sha256:08c25f73c9655c496f9caddb3e3295cecabfcabc5e7904a496845894a8f3b88f`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [b3f3bce7](https://github.com/openshift/os/commit/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e) `sha256:bf589c5db62206ab0dfc002283e0dc65f30088d6db4e2df8b87c42e88ea49feb`


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/e5f0dc03f4dd4db98f635705b8b4fee4ad6c482b)

* [OCPBUGS-104122](https://issues.redhat.com/browse/OCPBUGS-104122): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#206](https://github.com/openshift/machine-api-provider-aws/pull/206)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/116192b6d78b0f62f8ca111a9fd4d2eb4324bc5f...e5f0dc03f4dd4db98f635705b8b4fee4ad6c482b)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/37c23eebf1ae5833fb66c8bff57740f8c0d45603)

* [OCPBUGS-130583](https://issues.redhat.com/browse/OCPBUGS-130583): Added global overrides for OVN-Kubernetes [#3192](https://github.com/openshift/cluster-network-operator/pull/3192)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/bd4ada0046efe2f4ec12aac7ce1f555c9e510830...37c23eebf1ae5833fb66c8bff57740f8c0d45603)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/72abb01aca3ca72d1f64328ef07b0cafd34e1f5e)

* [OCPBUGS-127955](https://issues.redhat.com/browse/OCPBUGS-127955): Replace golang.org/x/net with sustaining_fork version to resolve CVE-2026-39821 (release-4.21) [#166](https://github.com/openshift/kube-rbac-proxy/pull/166)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/cd636680e06a55395c26570dff0cb37277014388...72abb01aca3ca72d1f64328ef07b0cafd34e1f5e)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/10415bfe1d1fd2e951a3655ba6c8230025ab9c0f)

* [OCPBUGS-130778](https://issues.redhat.com/browse/OCPBUGS-130778): backport kube-state-metrics 2.18 memory leak fix [#199](https://github.com/openshift/kube-state-metrics/pull/199)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/3b77935dcf45ac9a6772259d8120889b95a5f02a...10415bfe1d1fd2e951a3655ba6c8230025ab9c0f)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/2ae316fed5fbfee4cf00f4a96f24e43afe6e7b0e)

* [OCPBUGS-129667](https://issues.redhat.com/browse/OCPBUGS-129667): Boot image controller skips MachineSets that don't match any failure domain [#6642](https://github.com/openshift/machine-config-operator/pull/6642)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b13ad2aab188dc77776734da29afbf904f8b5006...2ae316fed5fbfee4cf00f4a96f24e43afe6e7b0e)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/be0f1245247b93fd92c4481cbb01a810d4fa368b)

* [OCPBUGS-104165](https://issues.redhat.com/browse/OCPBUGS-104165): Use patched x/net fork v0.50.0-sec.4 [#460](https://github.com/openshift/openshift-controller-manager/pull/460)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/438d52e79d691e016d66eabfe9a53c84229db40c...be0f1245247b93fd92c4481cbb01a810d4fa368b)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/ade3050b01d89ebdbfdfc132f5a3c24b04c27079)

* NO-JIRA: REVERT-ME: Precreate CDN gateway topology before NAD/UDN sync [#3519](https://github.com/openshift/ovn-kubernetes/pull/3519)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/6ed5a191495fb937d888d2dc60293f9e88fadaf3...ade3050b01d89ebdbfdfc132f5a3c24b04c27079)