diff --git a/.gitignore b/.gitignore
index 46acd34..72f412e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -137,3 +137,4 @@ certmonger-0.28.tar.gz
 /certmonger-0.79.18.tar.gz
 /certmonger-0.79.19.tar.gz
 /certmonger-0.79.20.tar.gz
+/certmonger-0.79.21.tar.gz
diff --git a/certmonger.spec b/certmonger.spec
index 64e156c..37cbc1b 100644
--- a/certmonger.spec
+++ b/certmonger.spec
@@ -27,8 +27,8 @@
 %bcond_with xmlrpc
 
 Name:		certmonger
-Version:	0.79.20
-Release:	3%{?dist}
+Version:	0.79.21
+Release:	1%{?dist}
 Summary:	Certificate status monitor and PKI enrollment client
 
 License:	GPL-3.0-or-later
@@ -264,6 +264,9 @@ exit 0
 %endif
 
 %changelog
+* Wed Oct 01 2025 Rob Crittenden <rcritten@redhat.com> - 0.79.21-1
+- Update to upstream 0.79.21 (RHEL-113257)
+
 * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 0.79.20-3
 - Bump release for October 2024 mass rebuild:
   Resolves: RHEL-64018
diff --git a/sources b/sources
index dab5d02..7562451 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (certmonger-0.79.20.tar.gz) = 76685185172bbf2c766c477c399ce0b14c9fd2d81637b44b8da80ae045ebf6c650ae3d525a87dccd755a6c92d4a5916bb62f8ea1d8520c47ae64770be6a5d2be
+SHA512 (certmonger-0.79.21.tar.gz) = a008984b7592c6af7f5b91f05158637bacf369c846f10e3c38dfa18e12e7738025a5897e627826e341e77ec9657cc0042687a79af8eb9c69d2063aee78be7c6b