diff --git a/hivex.spec b/hivex.spec
index c4d001a..cfd4da4 100644
--- a/hivex.spec
+++ b/hivex.spec
@@ -9,8 +9,8 @@
 %global verify_tarball_signature 1
 
 Name:           hivex
-Version:        1.3.20
-Release:        7%{?dist}
+Version:        1.3.21
+Release:        1%{?dist}
 Summary:        Read and write Windows Registry binary hive files
 
 License:        LGPLv2
@@ -323,6 +323,10 @@ fi
 
 
 %changelog
+* Mon Aug  2 2021 Richard W.M. Jones <rjones@redhat.com> - 1.3.21-1
+- New upstream version 1.3.21.
+- Fixes CVE-2021-3622 limit recursion in ri-records.
+
 * Wed Jun 23 2021 Richard W.M. Jones <rjones@redhat.com> - 1.3.20-7
 - Bump and rebuild
   resolves: rhbz#1975314
diff --git a/sources b/sources
index c24d36a..330792d 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (hivex-1.3.20.tar.gz) = 366e84c2a13ff53c70036df60db6e2b469cd06e3405761df73c47978b4fa0245246a1ea912aa5852b1272221d55c6c100b40b00e4c9a6f5668d12ff7f93c787a
-SHA512 (hivex-1.3.20.tar.gz.sig) = 965d14010ac31893eb51bb095b1ef6b983750031a34117329c8d2aa20f7f54a828e45c60992b0b823bea35d20fc4cfc77e4a9d2f99965cd3a84216a8059c013d
+SHA512 (hivex-1.3.21.tar.gz) = e893d9fa77655540d29ef6657764f701f9cddb33d11b2bfef36ce0c2caebab92b55a32b7e1c99efbab0d53f558a44bf1c4c6f6da13daa37d568ff96d7d28f842
+SHA512 (hivex-1.3.21.tar.gz.sig) = f70ff14ef374d1d64a9c0a95928a5c8f38f4e75671abf544850239e322ab3a3cc6788fd8be58c61c96ed3b1a34e176f01f5b027a4cf9946182e847d45a3a9ba8