diff --git a/.gitignore b/.gitignore
index 2d9642e..26e3338 100644
--- a/.gitignore
+++ b/.gitignore
@@ -38,3 +38,4 @@ jss-4.2.6.tar.gz
 /jss-5.0.0-beta1.tar.gz
 /jss-5.0.0.tar.gz
 /jss-5.0.1.tar.gz
+/jss-5.0.2.tar.gz
diff --git a/jss.spec b/jss.spec
index e80a43a..ca1766a 100644
--- a/jss.spec
+++ b/jss.spec
@@ -8,8 +8,8 @@ License:        MPLv1.1 or GPLv2+ or LGPLv2+
 
 # For development (i.e. unsupported) releases, use x.y.z-0.n.<phase>.
 # For official (i.e. supported) releases, use x.y.z-r where r >=1.
-Version:        5.0.1
-Release:        2%{?_timestamp}%{?_commit_id}%{?dist}
+Version:        5.0.2
+Release:        1%{?_timestamp}%{?_commit_id}%{?dist}
 #global         _phase -alpha1
 
 # To generate the source tarball:
@@ -159,6 +159,10 @@ modutil -dbdir /etc/pki/nssdb -chkfips true | grep -q enabled && export FIPS_ENA
 
 ################################################################################
 %changelog
+* Wed Feb 02 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
+- Rebase to JSS 5.0.2
+- Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser
+
 * Fri Nov 19 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.1-1
 - Rebase to JSS 5.0.1
 
diff --git a/sources b/sources
index fc1e3f0..e4c8e74 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (jss-5.0.1.tar.gz) = ea7c90475ee0d3c4609207eb2850991c253351b559761789481ce75a6bab7c53154090dcff9d5e17c8b90df32811381b9ba1387f8afaaff05d774ba4e0593604
+SHA512 (jss-5.0.2.tar.gz) = a8c64686b1914520487560faa67af0f0b424382b29c109da1eef1d21181012cb7e3eb4f463b2cd1d3e3f8cb8d82ddda473bfe6b1c745aec38ad5f818e19b21d8