diff --git a/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml b/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml
index bd1e59f6c3a..66f0741ec0e 100644
--- a/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml
+++ b/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml
@@ -27,7 +27,7 @@ spec:
       terminationGracePeriodSeconds: 0
       initContainers:
         - name: install-cni
-          image: gcr.io/projectcalico-org/cni:v3.8.3
+          image: gcr.io/projectcalico-org/cni:v3.8.4
           command: ["/install-cni.sh"]
           env:
             - name: CNI_CONF_NAME
@@ -78,7 +78,7 @@ spec:
         # container programs network policy and routes on each
         # host.
         - name: calico-node
-          image: gcr.io/projectcalico-org/node:v3.8.3
+          image: gcr.io/projectcalico-org/node:v3.8.4
           env:
             - name: CALICO_MANAGE_CNI
               value: "true"
diff --git a/cluster/addons/calico-policy-controller/typha-deployment.yaml b/cluster/addons/calico-policy-controller/typha-deployment.yaml
index 2530b2d4a49..c63dc0f1b94 100644
--- a/cluster/addons/calico-policy-controller/typha-deployment.yaml
+++ b/cluster/addons/calico-policy-controller/typha-deployment.yaml
@@ -23,7 +23,7 @@ spec:
       hostNetwork: true
       serviceAccountName: calico
       containers:
-      - image: gcr.io/projectcalico-org/typha:v3.8.3
+      - image: gcr.io/projectcalico-org/typha:v3.8.4
         name: calico-typha
         ports:
         - containerPort: 5473