diff --git a/sources b/sources
index 8d4722c..c247f9d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (apache-tomcat-9.0.13-src.tar.gz) = ee61f13d54d2fde81f6a9333e0963d42374f79d3e884f28daae2f4426b7b2d1d26b7a99d6872f0648474c9277c189ac412a91f67faf173532f4367ed3ffd238c
+SHA512 (apache-tomcat-9.0.21-src.tar.gz) = 6df978bbe9bb3a327d784d81a46affa4cfe5d370c2b847e102d25a792752ba487ebae329d1763ed7459cb3d49098c3d0cf6b01155536a04c17c4ffdf9e9a774f
diff --git a/tomcat.spec b/tomcat.spec
index efb3104..4277fd2 100644
--- a/tomcat.spec
+++ b/tomcat.spec
@@ -31,13 +31,13 @@
 %global jspspec 2.3
 %global major_version 9
 %global minor_version 0
-%global micro_version 13
+%global micro_version 21
 %global packdname apache-tomcat-%{version}-src
 %global servletspec 4.0
 %global elspec 3.0
 %global tcuid 91
 # Recommended version is specified in java/org/apache/catalina/core/AprLifecycleListener.java
-%global native_version 1.2.14
+%global native_version 1.2.21
 
 
 # FHS 2.3 compliant tree structure - http://www.pathname.com/fhs/2.3/
@@ -62,7 +62,7 @@
 Name:          tomcat
 Epoch:         1
 Version:       %{major_version}.%{minor_version}.%{micro_version}
-Release:       4%{?dist}
+Release:       1%{?dist}
 Summary:       Apache Servlet/JSP Engine, RI for Servlet %{servletspec}/JSP %{jspspec} API
 
 License:       ASL 2.0
@@ -616,6 +616,9 @@ fi
 %attr(0660,tomcat,tomcat) %verify(not size md5 mtime) %{logdir}/catalina.out
 
 %changelog
+* Tue Jun 18 2019 Coty Sutherland <csutherl@redhat.com> - 1:9.0.21-1
+- Update to 9.0.21
+
 * Tue Apr 02 2019 Coty Sutherland <csutherl@redhat.com> - 1:9.0.13-4
 - Remove javadoc subpackage to drop the jpackage-utils dependency