Issued:

2026-02-03

Updated:

2026-02-03

RHBA-2025:15963 - OpenShift Container Platform 4.21.0 packages update

Synopsis

OpenShift Container Platform 4.21.0 packages update

Type/Severity

Bug Fix Advisory None

Topic

Red Hat OpenShift Container Platform release 4.21.0 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.21.0. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2026:1481

All OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at

https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.

Solution

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/

Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.

Affected Products

Updated Packages

• openshift-kube-apiserver-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.s390x.rpm
• ose-azure-acr-image-credential-provider-4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el8.src.rpm
• haproxy-debugsource-2.8.10-1.rhaos4.21.el9.s390x.rpm
• openstack-ironic-inspector-api-12.1.0-0.20240320171527.bdc69d4.el9.noarch.rpm
• cri-tools-1.34.0-3.el9.src.rpm
• openshift-clients-4.21.0-202601070814.p2.g345800d.assembly.stream.el8.s390x.rpm
• ose-crio-credential-provider-4.21.0-202601070814.p2.g2a5bd7e.assembly.stream.el8.aarch64.rpm
• ose-crio-credential-provider-4.21.0-202601070814.p2.g2a5bd7e.assembly.stream.el9.aarch64.rpm
• ose-gcp-gcr-image-credential-provider-4.21.0-202601070814.p2.g8732386.assembly.stream.el8.x86_64.rpm
• openshift-kubelet-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.aarch64.rpm
• cri-o-debuginfo-1.34.3-2.rhaos4.21.gitd80d17d.el9.x86_64.rpm
• container-selinux-2.237.0-1.rhaos4.21.el9.noarch.rpm
• haproxy28-2.8.10-1.rhaos4.21.el9.ppc64le.rpm
• ose-aws-ecr-image-credential-provider-4.21.0-202601070814.p2.g3365bc9.assembly.stream.el9.s390x.rpm
• ose-azure-acr-image-credential-provider-4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el8.x86_64.rpm
• ose-gcp-gcr-image-credential-provider-4.21.0-202601070814.p2.g8732386.assembly.stream.el9.ppc64le.rpm
• openshift-hyperkube-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.aarch64.rpm
• ose-azure-acr-image-credential-provider-4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el9.ppc64le.rpm
• ose-gcp-gcr-image-credential-provider-4.21.0-202601070814.p2.g8732386.assembly.stream.el9.src.rpm
• ose-gcp-gcr-image-credential-provider-4.21.0-202601070814.p2.g8732386.assembly.stream.el9.x86_64.rpm
• podman-plugins-debuginfo-5.4.0-14.rhaos4.21.el9.aarch64.rpm
• podman-tests-5.4.0-14.rhaos4.21.el9.x86_64.rpm
• ose-crio-credential-provider-4.21.0-202601070814.p2.g2a5bd7e.assembly.stream.el8.src.rpm
• python3-ironic-inspector-tests-12.1.0-0.20240320171527.bdc69d4.el9.noarch.rpm
• python3.12-flit_core-3.12.0-1.el9ocp.src.rpm
• python3.12-ironic-prometheus-exporter-4.7.0-1.el9ocp.noarch.rpm
• runc-debugsource-1.2.9-2.rhaos4.21.el9.aarch64.rpm
• openshift-clients-4.21.0-202601070814.p2.g345800d.assembly.stream.el9.aarch64.rpm
• ose-azure-acr-image-credential-provider-4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el9.src.rpm
• podman-debuginfo-5.4.0-14.rhaos4.21.el9.s390x.rpm
• ose-aws-ecr-image-credential-provider-4.21.0-202601070814.p2.g3365bc9.assembly.stream.el8.ppc64le.rpm
• podman-plugins-debuginfo-5.4.0-14.rhaos4.21.el9.x86_64.rpm
• podman-tests-5.4.0-14.rhaos4.21.el9.s390x.rpm
• haproxy-debugsource-2.8.10-1.rhaos4.21.el9.x86_64.rpm
• openshift-kube-apiserver-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.ppc64le.rpm
• openshift-kubelet-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.x86_64.rpm
• ose-azure-acr-image-credential-provider-4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el8.aarch64.rpm
• podman-5.4.0-14.rhaos4.21.el9.x86_64.rpm
• cri-tools-1.34.0-3.el9.aarch64.rpm
• python-oslo-service-4.3.0-1.el9ocp.src.rpm
• python3-ironic-python-agent-10.3.0-0.20250409132023.3f80d74.el9.noarch.rpm
• python3.12-flit_core-3.12.0-1.el9ocp.noarch.rpm
• cri-o-1.34.3-2.rhaos4.21.gitd80d17d.el9.x86_64.rpm
• ose-crio-credential-provider-4.21.0-202601070814.p2.g2a5bd7e.assembly.stream.el8.s390x.rpm
• python-futurist-3.2.1-1.el9ocp.src.rpm
• python-lark-1.2.2-1.el9ocp.src.rpm
• python-ironic-lib-7.0.1-0.20250214210548.96ac462.el9.src.rpm
• python3-proliantutils-2.16.3-0.20250214200633.fe2f9c2.el9.noarch.rpm
• python3.12-oslo-service-4.3.0-1.el9ocp.noarch.rpm
• cri-o-1.34.3-2.rhaos4.21.gitd80d17d.el9.src.rpm
• openstack-ironic-python-agent-10.3.0-0.20250409132023.3f80d74.el9.noarch.rpm
• haproxy-2.8.10-1.rhaos4.21.el9.src.rpm
• podman-remote-5.4.0-14.rhaos4.21.el9.s390x.rpm
• podman-tests-5.4.0-14.rhaos4.21.el9.aarch64.rpm
• runc-debuginfo-1.2.9-2.rhaos4.21.el9.aarch64.rpm
• cri-tools-debuginfo-1.34.0-3.el9.x86_64.rpm
• cri-tools-debuginfo-1.34.0-3.el9.ppc64le.rpm
• podman-debuginfo-5.4.0-14.rhaos4.21.el9.aarch64.rpm
• ose-aws-ecr-image-credential-provider-4.21.0-202601070814.p2.g3365bc9.assembly.stream.el9.src.rpm
• podman-plugins-debuginfo-5.4.0-14.rhaos4.21.el9.ppc64le.rpm
• haproxy28-debuginfo-2.8.10-1.rhaos4.21.el9.x86_64.rpm
• podman-remote-debuginfo-5.4.0-14.rhaos4.21.el9.aarch64.rpm
• python3.12-lark-1.2.2-1.el9ocp.noarch.rpm
• runc-1.2.9-2.rhaos4.21.el9.src.rpm
• runc-debugsource-1.2.9-2.rhaos4.21.el9.x86_64.rpm
• python-setproctitle-1.3.7-1.el9ocp.src.rpm
• ose-azure-acr-image-credential-provider-4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el8.ppc64le.rpm
• podman-debugsource-5.4.0-14.rhaos4.21.el9.x86_64.rpm
• podman-docker-5.4.0-14.rhaos4.21.el9.noarch.rpm
• runc-debugsource-1.2.9-2.rhaos4.21.el9.ppc64le.rpm
• openshift-ansible-test-4.21.0-202601070814.p2.g75653ac.assembly.stream.el8.noarch.rpm
• openshift-kubelet-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.s390x.rpm
• podman-remote-debuginfo-5.4.0-14.rhaos4.21.el9.ppc64le.rpm
• python3-ironic-lib-7.0.1-0.20250214210548.96ac462.el9.noarch.rpm
• python-cotyledon-2.0.0-1.el9ocp.src.rpm
• podman-plugins-5.4.0-14.rhaos4.21.el9.aarch64.rpm
• python3.12-setproctitle-1.3.7-1.el9ocp.x86_64.rpm
• openshift-clients-4.21.0-202601070814.p2.g345800d.assembly.stream.el9.x86_64.rpm
• podman-debuginfo-5.4.0-14.rhaos4.21.el9.ppc64le.rpm
• cri-tools-1.34.0-3.el9.ppc64le.rpm
• podman-5.4.0-14.rhaos4.21.el9.s390x.rpm
• openshift-kube-scheduler-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.aarch64.rpm
• podman-remote-debuginfo-5.4.0-14.rhaos4.21.el9.s390x.rpm
• python-ironic-prometheus-exporter-4.7.0-1.el9ocp.src.rpm
• runc-1.2.9-2.rhaos4.21.el9.s390x.rpm
• runc-debuginfo-1.2.9-2.rhaos4.21.el9.x86_64.rpm
• cri-o-1.34.3-2.rhaos4.21.gitd80d17d.el9.ppc64le.rpm
• openshift-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.src.rpm
• ose-crio-credential-provider-4.21.0-202601070814.p2.g2a5bd7e.assembly.stream.el9.x86_64.rpm
• openshift-hyperkube-4.21.0-202601070814.p2.g52351d6.assembly.stream.el8.x86_64.rpm
• runc-debuginfo-1.2.9-2.rhaos4.21.el9.s390x.rpm
• runc-debuginfo-1.2.9-2.rhaos4.21.el9.ppc64le.rpm
• podman-5.4.0-14.rhaos4.21.el9.aarch64.rpm
• cri-o-debugsource-1.34.3-2.rhaos4.21.gitd80d17d.el9.ppc64le.rpm
• cri-o-debuginfo-1.34.3-2.rhaos4.21.gitd80d17d.el9.ppc64le.rpm
• openshift-hyperkube-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.x86_64.rpm
• podman-remote-5.4.0-14.rhaos4.21.el9.x86_64.rpm
• openshift-hyperkube-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.ppc64le.rpm
• haproxy28-debuginfo-2.8.10-1.rhaos4.21.el9.s390x.rpm
• ose-gcp-gcr-image-credential-provider-4.21.0-202601070814.p2.g8732386.assembly.stream.el8.s390x.rpm
• podman-plugins-5.4.0-14.rhaos4.21.el9.s390x.rpm
• python3.12-oslo-service-tests-4.3.0-1.el9ocp.noarch.rpm
• ose-aws-ecr-image-credential-provider-4.21.0-202601070814.p2.g3365bc9.assembly.stream.el8.src.rpm
• cri-o-debuginfo-1.34.3-2.rhaos4.21.gitd80d17d.el9.aarch64.rpm
• haproxy28-2.8.10-1.rhaos4.21.el9.s390x.rpm
• cri-tools-debuginfo-1.34.0-3.el9.aarch64.rpm
• cri-o-debugsource-1.34.3-2.rhaos4.21.gitd80d17d.el9.aarch64.rpm
• podman-debugsource-5.4.0-14.rhaos4.21.el9.aarch64.rpm
• python-proliantutils-2.16.3-0.20250214200633.fe2f9c2.el9.src.rpm
• runc-1.2.9-2.rhaos4.21.el9.ppc64le.rpm
• openstack-ironic-inspector-conductor-12.1.0-0.20240320171527.bdc69d4.el9.noarch.rpm
• cri-tools-debugsource-1.34.0-3.el9.aarch64.rpm
• openshift-clients-redistributable-4.21.0-202601070814.p2.g345800d.assembly.stream.el8.x86_64.rpm
• ose-aws-ecr-image-credential-provider-4.21.0-202601070814.p2.g3365bc9.assembly.stream.el8.s390x.rpm
• cri-o-debugsource-1.34.3-2.rhaos4.21.gitd80d17d.el9.x86_64.rpm
• openshift-hyperkube-4.21.0-202601070814.p2.g52351d6.assembly.stream.el8.s390x.rpm
• openstack-ironic-python-agent-10.3.0-0.20250409132023.3f80d74.el9.src.rpm
• openshift-kube-controller-manager-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.aarch64.rpm
• podman-debugsource-5.4.0-14.rhaos4.21.el9.s390x.rpm
• podman-remote-5.4.0-14.rhaos4.21.el9.aarch64.rpm
• openshift-kube-controller-manager-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.ppc64le.rpm
• openshift-clients-4.21.0-202601070814.p2.g345800d.assembly.stream.el8.aarch64.rpm
• openshift-hyperkube-4.21.0-202601070814.p2.g52351d6.assembly.stream.el8.aarch64.rpm
• ose-aws-ecr-image-credential-provider-4.21.0-202601070814.p2.g3365bc9.assembly.stream.el8.x86_64.rpm
• ose-azure-acr-image-credential-provider-4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el8.s390x.rpm
• podman-remote-5.4.0-14.rhaos4.21.el9.ppc64le.rpm
• python3-ironic-python-agent-tests-10.3.0-0.20250409132023.3f80d74.el9.noarch.rpm
• runc-debugsource-1.2.9-2.rhaos4.21.el9.s390x.rpm
• openshift-clients-4.21.0-202601070814.p2.g345800d.assembly.stream.el8.x86_64.rpm
• toolbox-0.1.2-1.rhaos4.21.el9.src.rpm
• ose-gcp-gcr-image-credential-provider-4.21.0-202601070814.p2.g8732386.assembly.stream.el8.ppc64le.rpm
• podman-plugins-5.4.0-14.rhaos4.21.el9.ppc64le.rpm
• python3-sushy-oem-idrac-6.0.0-0.20250214204117.8409225.el9.noarch.rpm
• python3.12-cotyledon-tests-2.0.0-1.el9ocp.noarch.rpm
• runc-1.2.9-2.rhaos4.21.el9.aarch64.rpm
• openstack-ironic-inspector-12.1.0-0.20240320171527.bdc69d4.el9.noarch.rpm
• cri-o-debuginfo-1.34.3-2.rhaos4.21.gitd80d17d.el9.s390x.rpm
• cri-tools-1.34.0-3.el9.s390x.rpm
• python3.12-cotyledon-2.0.0-1.el9ocp.noarch.rpm
• openshift-clients-4.21.0-202601070814.p2.g345800d.assembly.stream.el9.ppc64le.rpm
• podman-debuginfo-5.4.0-14.rhaos4.21.el9.x86_64.rpm
• python-setproctitle-debugsource-1.3.7-1.el9ocp.x86_64.rpm
• openshift-clients-redistributable-4.21.0-202601070814.p2.g345800d.assembly.stream.el9.x86_64.rpm
• openshift-kube-scheduler-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.ppc64le.rpm
• ose-aws-ecr-image-credential-provider-4.21.0-202601070814.p2.g3365bc9.assembly.stream.el9.ppc64le.rpm
• haproxy-debugsource-2.8.10-1.rhaos4.21.el9.ppc64le.rpm
• openshift-ansible-4.21.0-202601070814.p2.g75653ac.assembly.stream.el8.src.rpm
• openshift4-aws-iso-4.21.0-202601070814.p2.gd2acdd5.assembly.stream.el8.noarch.rpm
• ose-aws-ecr-image-credential-provider-4.21.0-202601070814.p2.g3365bc9.assembly.stream.el9.x86_64.rpm
• podman-5.4.0-14.rhaos4.21.el9.src.rpm
• ose-crio-credential-provider-4.21.0-202601070814.p2.g2a5bd7e.assembly.stream.el9.ppc64le.rpm
• openshift-kube-controller-manager-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.s390x.rpm
• cri-tools-1.34.0-3.el9.x86_64.rpm
• cri-tools-debugsource-1.34.0-3.el9.x86_64.rpm
• ose-azure-acr-image-credential-provider-4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el9.aarch64.rpm
• openshift-4.21.0-202601070814.p2.g52351d6.assembly.stream.el8.src.rpm
• openshift-clients-4.21.0-202601070814.p2.g345800d.assembly.stream.el8.ppc64le.rpm
• openshift-ansible-4.21.0-202601070814.p2.g75653ac.assembly.stream.el8.noarch.rpm
• ose-azure-acr-image-credential-provider-4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el9.s390x.rpm
• ose-aws-ecr-image-credential-provider-4.21.0-202601070814.p2.g3365bc9.assembly.stream.el9.aarch64.rpm
• ose-aws-ecr-image-credential-provider-4.21.0-202601070814.p2.g3365bc9.assembly.stream.el8.aarch64.rpm
• ose-gcp-gcr-image-credential-provider-4.21.0-202601070814.p2.g8732386.assembly.stream.el8.src.rpm
• python-watchdog-6.0.0-1.el9ocp.src.rpm
• python3.12-setproctitle-debuginfo-1.3.7-1.el9ocp.x86_64.rpm
• openshift-clients-4.21.0-202601070814.p2.g345800d.assembly.stream.el9.src.rpm
• python3.12-futurist-3.2.1-1.el9ocp.noarch.rpm
• haproxy28-debuginfo-2.8.10-1.rhaos4.21.el9.aarch64.rpm
• ose-crio-credential-provider-4.21.0-202601070814.p2.g2a5bd7e.assembly.stream.el8.ppc64le.rpm
• podman-debugsource-5.4.0-14.rhaos4.21.el9.ppc64le.rpm
• podman-remote-debuginfo-5.4.0-14.rhaos4.21.el9.x86_64.rpm
• haproxy28-debuginfo-2.8.10-1.rhaos4.21.el9.ppc64le.rpm
• haproxy28-2.8.10-1.rhaos4.21.el9.aarch64.rpm
• openshift-ansible-test-4.21.0-202601070814.p2.g75653ac.assembly.stream.el9.noarch.rpm
• podman-plugins-debuginfo-5.4.0-14.rhaos4.21.el9.s390x.rpm
• cri-o-debugsource-1.34.3-2.rhaos4.21.gitd80d17d.el9.s390x.rpm
• openshift-hyperkube-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.s390x.rpm
• openshift-clients-4.21.0-202601070814.p2.g345800d.assembly.stream.el8.src.rpm
• openshift-clients-4.21.0-202601070814.p2.g345800d.assembly.stream.el9.s390x.rpm
• container-selinux-2.237.0-1.rhaos4.21.el9.src.rpm
• openshift-kube-scheduler-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.x86_64.rpm
• openshift-ansible-4.21.0-202601070814.p2.g75653ac.assembly.stream.el9.src.rpm
• openstack-ironic-inspector-12.1.0-0.20240320171527.bdc69d4.el9.src.rpm
• openstack-ironic-inspector-dnsmasq-12.1.0-0.20240320171527.bdc69d4.el9.noarch.rpm
• haproxy-debugsource-2.8.10-1.rhaos4.21.el9.aarch64.rpm
• openshift-kube-controller-manager-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.x86_64.rpm
• openshift-kube-apiserver-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.x86_64.rpm
• openshift-kubelet-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.ppc64le.rpm
• python-cotyledon-doc-2.0.0-1.el9ocp.noarch.rpm
• python3.12-watchdog-6.0.0-1.el9ocp.noarch.rpm
• openshift-ansible-4.21.0-202601070814.p2.g75653ac.assembly.stream.el9.noarch.rpm
• ose-crio-credential-provider-4.21.0-202601070814.p2.g2a5bd7e.assembly.stream.el9.src.rpm
• runc-1.2.9-2.rhaos4.21.el9.x86_64.rpm
• cri-tools-debugsource-1.34.0-3.el9.ppc64le.rpm
• toolbox-0.1.2-1.rhaos4.21.el9.noarch.rpm
• ose-gcp-gcr-image-credential-provider-4.21.0-202601070814.p2.g8732386.assembly.stream.el9.s390x.rpm
• podman-tests-5.4.0-14.rhaos4.21.el9.ppc64le.rpm
• podman-5.4.0-14.rhaos4.21.el9.ppc64le.rpm
• ose-azure-acr-image-credential-provider-4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el9.x86_64.rpm
• haproxy28-2.8.10-1.rhaos4.21.el9.x86_64.rpm
• openshift-hyperkube-4.21.0-202601070814.p2.g52351d6.assembly.stream.el8.ppc64le.rpm
• python-sushy-oem-idrac-6.0.0-0.20250214204117.8409225.el9.src.rpm
• cri-tools-debugsource-1.34.0-3.el9.s390x.rpm
• podman-plugins-5.4.0-14.rhaos4.21.el9.x86_64.rpm
• cri-o-1.34.3-2.rhaos4.21.gitd80d17d.el9.s390x.rpm
• openshift-kube-apiserver-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.aarch64.rpm
• ose-crio-credential-provider-4.21.0-202601070814.p2.g2a5bd7e.assembly.stream.el9.s390x.rpm
• python3-sushy-oem-idrac-tests-6.0.0-0.20250214204117.8409225.el9.noarch.rpm
• cri-tools-debuginfo-1.34.0-3.el9.s390x.rpm
• cri-o-1.34.3-2.rhaos4.21.gitd80d17d.el9.aarch64.rpm
• ose-crio-credential-provider-4.21.0-202601070814.p2.g2a5bd7e.assembly.stream.el8.x86_64.rpm
• openshift4-aws-iso-4.21.0-202601070814.p2.gd2acdd5.assembly.stream.el8.src.rpm
• openshift-kube-scheduler-4.21.0-202601070814.p2.g52351d6.assembly.stream.el9.s390x.rpm

Fixes

(none)

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.