diff --git a/0001-nghttp2-1.13.0-armv7hl-sigsegv.patch b/0001-nghttp2-1.13.0-armv7hl-sigsegv.patch
index f7912cf..b4b3027 100644
--- a/0001-nghttp2-1.13.0-armv7hl-sigsegv.patch
+++ b/0001-nghttp2-1.13.0-armv7hl-sigsegv.patch
@@ -44,7 +44,7 @@ diff --git a/src/shrpx_client_handler.h b/src/shrpx_client_handler.h
 index bdfdafd..08f42b3 100644
 --- a/src/shrpx_client_handler.h
 +++ b/src/shrpx_client_handler.h
-@@ -187,8 +187,10 @@ private:
+@@ -185,8 +185,10 @@ private:
    StringRef forwarded_for_;
    // lowercased TLS SNI which client sent.
    StringRef sni_;
diff --git a/nghttp2.spec b/nghttp2.spec
index 4d4d276..01f4bfe 100644
--- a/nghttp2.spec
+++ b/nghttp2.spec
@@ -1,6 +1,6 @@
 Summary: Experimental HTTP/2 client, server and proxy
 Name: nghttp2
-Version: 1.20.0
+Version: 1.21.0
 Release: 1%{?dist}
 License: MIT
 Group: Applications/Internet
@@ -117,6 +117,9 @@ make %{?_smp_mflags} check
 
 
 %changelog
+* Mon Mar 27 2017 Kamil Dudka <kdudka@redhat.com> 1.21.0-1
+- update to the latest upstream release
+
 * Sun Feb 26 2017 Tomasz Torcz <ttorcz@fedoraproject.org> - 1.20.0-1
 - package systemd unit file (#1426929)
 - update to latest upstream release
diff --git a/sources b/sources
index 1edb81b..7090d18 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (nghttp2-1.20.0.tar.xz) = 189f1e74972cec2684a0cbf27c144b03729c718032cbe61b0578979c8d14234c01da306c851aada12d00d255453dc180998e59016a22025de749bb2cfff220f0
+SHA512 (nghttp2-1.21.0.tar.xz) = 55e7cad765d1f2f8e3211c20a8a316b6defebfe431f6c07ab81ed3dbe18bbf0eba8d6a980906b919a9e169568272f21e9eb946f6d555169085537f460dc35c4d