diff --git a/.container-selinux.metadata b/.container-selinux.metadata
index c55ecd9..eb43679 100644
--- a/.container-selinux.metadata
+++ b/.container-selinux.metadata
@@ -1 +1 @@
-8a7b53253c8d1616eb868edc8796da0bd4ec9db3 SOURCES/container-selinux-1f34237.tar.gz
+0495ea8fd635290c9f5981a11b523e7d351fc1dc SOURCES/container-selinux-333854a.tar.gz
diff --git a/.gitignore b/.gitignore
index 6de4e9b..bed9e06 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/container-selinux-1f34237.tar.gz
+SOURCES/container-selinux-333854a.tar.gz
diff --git a/SPECS/container-selinux.spec b/SPECS/container-selinux.spec
index d2f2a77..8428ee5 100644
--- a/SPECS/container-selinux.spec
+++ b/SPECS/container-selinux.spec
@@ -2,7 +2,7 @@
 
 # container-selinux
 %global git0 https://github.com/projectatomic/%{name}
-%global commit0 1f34237f9f8ece246bd3122a1d90f27379bdf687
+%global commit0 333854a550c008aa76484db08cfdb67ecfa90bc6
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # container-selinux stuff (prefix with ds_ for version/release etc.)
@@ -24,8 +24,8 @@
 
 Name: container-selinux
 Epoch: 2
-Version: 2.19
-Release: 2.1%{?dist}
+Version: 2.21
+Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
 Summary: SELinux policies for container runtimes
@@ -109,6 +109,18 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Wed Jul 19 2017 Lokesh Mandvekar <lsm5@redhat.com> - 2:2.21-1
+- Resolves: #1469661
+- bump to v2.21
+- built commit 333854a
+
+* Mon Jul 10 2017 Lokesh Mandvekar <lsm5@redhat.com> - 2:2.20-2
+- Resolves: #1463549
+- built commit 532fa20
+
+* Tue Jul 04 2017 Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.20-1.1
+- rebase
+
 * Wed Jun 14 2017 Lokesh Mandvekar <lsm5@redhat.com> - 2:2.19-2.1
 - update release tag to isolate from 7.3