# 4.21.39

Created: 2026-10-16 13:30:39 +0000 UTC

Image Digest: `sha256:0a3ef96195657bfba3130017c6d7a6833fb9fef28c6650d7622e587d20200ade`


## Changes from 4.21.38

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.9
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0


### Rebuilt images without code change

* [console](https://github.com/openshift/console) git [2f1997ab](https://github.com/openshift/console/commit/2f1997abe650fbe9de360a061360c5fc0a67f6d9) `sha256:4ca73bf6752bae1e134a93340abce346ee371eb1c060369371f16c1ef419fc4d`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:72e537c1e7b9e49bf9633b0ab94a96db16c81f9231d763f29a767a37198520d8`
* [keepalived-ipfailover](https://github.com/openshift/images) git [f0241a3d](https://github.com/openshift/images/commit/f0241a3d2a12a8b2965cc36542babce8a1dffcf8) `sha256:7760d318f919685df34a2664f8724137a81bc94bef9f1d0cc258ff95fe5d0f39`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:2874eb0ac55d393a490a8e10c90206f2177383b7286cb45319ee536d8214aa96`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [a39d7c99](https://github.com/openshift/monitoring-plugin/commit/a39d7c998df44b47b48b8a60b593f077b7af489d) `sha256:a914b152664b16f3e813b40758c382a672e4f86a17af9ff2291d9d679a3b7e51`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [cdf3a589](https://github.com/openshift/networking-console-plugin/commit/cdf3a58985ac0deb76ef2f23cd78dd2920ada284) `sha256:af02891dde0d5196d8b088a5b851708ce40f5921529e0136bd458d3cbdd020e6`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [aa20150b](https://github.com/openshift/oc-mirror/commit/aa20150b0dfe6d3c5255570b45f14c8ee18f22b7) `sha256:f7f74ecf797c33d080bdf8ea0e5c3631053c2d546fa29b74ba2740a9b3f08a15`
* [rhel-coreos](https://github.com/openshift/os) git [b3f3bce7](https://github.com/openshift/os/commit/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e) `sha256:a98719ac794f1b26b5c85808b01fa483365503b01f1bf4c000a77cf4a042b661`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [b3f3bce7](https://github.com/openshift/os/commit/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e) `sha256:aa68d98098d14e8713be9c56a54915cfc3f48899d370cef78fe6322e073608b0`


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/37c23eebf1ae5833fb66c8bff57740f8c0d45603)

* [OCPBUGS-130583](https://issues.redhat.com/browse/OCPBUGS-130583): Added global overrides for OVN-Kubernetes [#3192](https://github.com/openshift/cluster-network-operator/pull/3192)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/bd4ada0046efe2f4ec12aac7ce1f555c9e510830...37c23eebf1ae5833fb66c8bff57740f8c0d45603)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/72abb01aca3ca72d1f64328ef07b0cafd34e1f5e)

* [OCPBUGS-127955](https://issues.redhat.com/browse/OCPBUGS-127955): Replace golang.org/x/net with sustaining_fork version to resolve CVE-2026-39821 (release-4.21) [#166](https://github.com/openshift/kube-rbac-proxy/pull/166)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/cd636680e06a55395c26570dff0cb37277014388...72abb01aca3ca72d1f64328ef07b0cafd34e1f5e)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/10415bfe1d1fd2e951a3655ba6c8230025ab9c0f)

* [OCPBUGS-130778](https://issues.redhat.com/browse/OCPBUGS-130778): backport kube-state-metrics 2.18 memory leak fix [#199](https://github.com/openshift/kube-state-metrics/pull/199)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/3b77935dcf45ac9a6772259d8120889b95a5f02a...10415bfe1d1fd2e951a3655ba6c8230025ab9c0f)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/2ae316fed5fbfee4cf00f4a96f24e43afe6e7b0e)

* [OCPBUGS-129667](https://issues.redhat.com/browse/OCPBUGS-129667): Boot image controller skips MachineSets that don't match any failure domain [#6642](https://github.com/openshift/machine-config-operator/pull/6642)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b13ad2aab188dc77776734da29afbf904f8b5006...2ae316fed5fbfee4cf00f4a96f24e43afe6e7b0e)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/be0f1245247b93fd92c4481cbb01a810d4fa368b)

* [OCPBUGS-104165](https://issues.redhat.com/browse/OCPBUGS-104165): Use patched x/net fork v0.50.0-sec.4 [#460](https://github.com/openshift/openshift-controller-manager/pull/460)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/438d52e79d691e016d66eabfe9a53c84229db40c...be0f1245247b93fd92c4481cbb01a810d4fa368b)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/ade3050b01d89ebdbfdfc132f5a3c24b04c27079)

* NO-JIRA: REVERT-ME: Precreate CDN gateway topology before NAD/UDN sync [#3519](https://github.com/openshift/ovn-kubernetes/pull/3519)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/6ed5a191495fb937d888d2dc60293f9e88fadaf3...ade3050b01d89ebdbfdfc132f5a3c24b04c27079)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/c393015c7fc110d393aa9f4a32450b3c55d207f8)

* [OCPBUGS-101468](https://issues.redhat.com/browse/OCPBUGS-101468), [OCPBUGS-104164](https://issues.redhat.com/browse/OCPBUGS-104164), [OCPBUGS-91239](https://issues.redhat.com/browse/OCPBUGS-91239), [OCPBUGS-96559](https://issues.redhat.com/browse/OCPBUGS-96559): Bump x/net to address CVEs [#116](https://github.com/openshift/cloud-provider-powervs/pull/116)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/40d1c0adfedeca36498a5d93d69aee96831c756d...c393015c7fc110d393aa9f4a32450b3c55d207f8)