diff --git a/.gitignore b/.gitignore
index 9916d69..907f352 100644
--- a/.gitignore
+++ b/.gitignore
@@ -218,3 +218,5 @@ bind-9.7.2b1.tar.gz
 /bind-9.18.19.tar.xz.asc
 /bind-9.18.20.tar.xz
 /bind-9.18.20.tar.xz.asc
+/bind-9.18.21.tar.xz
+/bind-9.18.21.tar.xz.asc
diff --git a/bind.spec b/bind.spec
index 3408c6c..c8a6a36 100644
--- a/bind.spec
+++ b/bind.spec
@@ -76,7 +76,7 @@ License:  MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause
 # ./lib/isc/string.c BSD-3-clause and/or MPL-2.0
 # ./lib/isc/tm.c BSD-2-clause and/or MPL-2.0
 # ./lib/isccfg/parser.c BSD-2-clause and/or MPL-2.0
-Version:  9.18.20
+Version:  9.18.21
 Release:  1%{?dist}
 Epoch:    32
 Url:      https://www.isc.org/downloads/bind/
@@ -964,6 +964,9 @@ fi;
 %endif
 
 %changelog
+* Mon Jan 15 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.21-1
+- Update to 9.18.21 (#2255407)
+
 * Thu Nov 16 2023 Petr Menšík <pemensik@redhat.com> - 32:9.18.20-1
 - Update to 9.18.20 (#2249835)
 
diff --git a/sources b/sources
index 549d8ab..0b5b7ad 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (bind-9.18.20.tar.xz) = 1ad89e5aa3d83a3c6536c2931e2ecdf6aca0d9d2678cf45dca8b0fb37968f7ef7aedff5d351083e6b09aeee1329b8885fd06263b21f5ebcde959ef0d84a86ffb
-SHA512 (bind-9.18.20.tar.xz.asc) = 9e8170fb5aacb8ea3c5c5512bd18ba8739c72df1416551493d8098427c7a9b1756ffb7ce7c93bbf43d1caed6e39ecf839eac15041de37ac0a89623b79b9281a7
+SHA512 (bind-9.18.21.tar.xz) = 3cbc1775b6ca3d5eda0c277ab1246b5baa535dac53df3e60690aa7a2529bcb0fb644f7749b21b757870e5b3bc5f53ae9f0c0db182664de1b23f7e62c3fa8757d
+SHA512 (bind-9.18.21.tar.xz.asc) = 1afa22dddb5d6c42e2dea2369cc048d548ad86e3d215c692320716488419c012ac849f1699d61451353574ec4621fc93f7111658e9de7fa286336d97e33d5de6