diff --git a/nextcloud.spec b/nextcloud.spec
index 40c0ba6..993587e 100644
--- a/nextcloud.spec
+++ b/nextcloud.spec
@@ -1,6 +1,6 @@
 Name:           nextcloud
-Version:        21.0.0
-Release:        2%{?dist}
+Version:        21.0.2
+Release:        1%{?dist}
 Summary:        Private file sync and share server
 License:        AGPLv3+ and MIT and BSD and ASL 2.0 and WTFPL and CC-BY-SA and GPLv3+ and Adobe
 URL:            http://nextcloud.com
@@ -501,6 +501,9 @@ fi
 
 
 %changelog
+* Wed Jun 30 2021 Christopher Engelhard <ce@lcts.de> - 21.0.2-1
+- Update to 21.0.2, fixes RHBZ 1977202 / CVE-2021-22915
+
 * Wed Feb 24 2021 Christopher Engelhard <ce@lcts.de> - 21.0.0-2
 - Drop dependency on php-imap. Fixes RHBZ #1933023
 
diff --git a/sources b/sources
index e386472..e468890 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (nextcloud-21.0.0.tar.bz2) = a1ae3400f0fb5997e54b0cee821c50d13e4ba0e27c9d11731c8b5233cba564666121a58aed848ccd2593a9783e27db1ed98ff559588a76a1acaeaf083ef4404a
+SHA512 (nextcloud-21.0.2.tar.bz2) = a222c55c7ff515b96b7c826da13ff1770f82bebda2e73df6bb31df635338155dff611a560b665b0e9b17f2d8f33132abf75ffa80e84f5a115ee5d8a4737b6795