diff --git a/.gitignore b/.gitignore
index 347eb45..794ad06 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,3 +19,4 @@
 /node-v0.10.18-stripped.tar.gz
 /node-v0.10.19-stripped.tar.gz
 /node-v0.10.20-stripped.tar.gz
+/node-v0.10.21-stripped.tar.gz
diff --git a/nodejs.spec b/nodejs.spec
index 68f4ee9..2c09356 100644
--- a/nodejs.spec
+++ b/nodejs.spec
@@ -1,5 +1,5 @@
 Name: nodejs
-Version: 0.10.20
+Version: 0.10.21
 Release: 1%{?dist}
 Summary: JavaScript runtime
 License: MIT and ASL 2.0 and ISC and BSD
@@ -172,6 +172,11 @@ cp -p common.gypi %{buildroot}%{_datadir}/node
 %{_pkgdocdir}/html
 
 %changelog
+* Fri Oct 18 2013 T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.21-1
+- new upstream release 0.10.21
+  http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable/
+- resolves an undisclosed security vulnerability in the http module
+
 * Tue Oct 01 2013 T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.20-1
 - new upstream release 0.10.20
   http://blog.nodejs.org/2013/09/30/node-v0-10-20-stable/
diff --git a/sources b/sources
index 5dfdbb9..8d0a82d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-acd2dfe42db77a1348360ee152245c39  node-v0.10.20-stripped.tar.gz
+26bb21ec7b63b11d07fc6383836dd119  node-v0.10.21-stripped.tar.gz