diff --git a/.cvsignore b/.cvsignore
index 2989f46..0bf2966 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -130,3 +130,4 @@ libsepol-2.0.16.tgz
 libsepol-2.0.18.tgz
 libsepol-2.0.19.tgz
 libsepol-2.0.20.tgz
+libsepol-2.0.21.tgz
diff --git a/libsepol.spec b/libsepol.spec
index 906f981..bee6ff8 100644
--- a/libsepol.spec
+++ b/libsepol.spec
@@ -1,7 +1,7 @@
 
 Summary: SELinux binary policy manipulation library 
 Name: libsepol
-Version: 2.0.20
+Version: 2.0.21
 Release: 1%{?dist}
 License: GPLv2+
 Group: System Environment/Libraries
@@ -97,6 +97,10 @@ exit 0
 /%{_lib}/libsepol.so.1
 
 %changelog
+* Wed Feb 20 2008 Dan Walsh <dwalsh@redhat.com> 2.0.21-1
+- Upgrade to latest from NSA
+	* Fix invalid memory allocation in policydb_index_others() from Jason Tang.
+
 * Mon Feb 4 2008 Dan Walsh <dwalsh@redhat.com> 2.0.20-1
 - Upgrade to latest from NSA
 	* Port of Yuichi Nakamura's tune avtab to reduce memory usage patch from the kernel avtab to libsepol from Stephen Smalley.
diff --git a/sources b/sources
index db8068c..f13d54e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-cdd39fe4d33f7423c6173ed11c815c34  libsepol-2.0.20.tgz
+d99007eff69bbc120d756e3f211ed652  libsepol-2.0.21.tgz