diff --git a/python-urllib3.changes b/python-urllib3.changes
index 2bd6b5c..42e19eb 100644
--- a/python-urllib3.changes
+++ b/python-urllib3.changes
@@ -1,4 +1,33 @@
 -------------------------------------------------------------------
+Sat Jun 10 08:10:33 UTC 2017 - dmueller@suse.com
+
+- update to 1.21.1:
+  * Fixed SecureTransport issue that would cause long delays in response body
+    delivery. (Pull #1154)
+  * Fixed regression in 1.21 that threw exceptions when users passed the
+    ``socket_options`` flag to the ``PoolManager``.  (Issue #1165)
+  * Fixed regression in 1.21 that threw exceptions when users passed the
+    ``assert_hostname`` or ``assert_fingerprint`` flag to the ``PoolManager``.
+  * Improved performance of certain selector system calls on Python 3.5 and
+    later. (Pull #1095)
+  * Resolved issue where the PyOpenSSL backend would not wrap SysCallError
+    exceptions appropriately when sending data. (Pull #1125)
+  * Selectors now detects a monkey-patched select module after import for modules
+    that patch the select module like eventlet, greenlet. (Pull #1128)
+  * Reduced memory consumption when streaming zlib-compressed responses
+    (as opposed to raw deflate streams). (Pull #1129)
+  * Connection pools now use the entire request context when constructing the
+    pool key. (Pull #1016)
+  * ``PoolManager.connection_from_*`` methods now accept a new keyword argument,
+    ``pool_kwargs``, which are merged with the existing ``connection_pool_kw``.
+  * Add retry counter for ``status_forcelist``. (Issue #1147)
+  * Added ``contrib`` module for using SecureTransport on macOS:
+    ``urllib3.contrib.securetransport``.  (Pull #1122)
+  * urllib3 now only normalizes the case of ``http://`` and ``https://`` schemes:
+    for schemes it does not recognise, it assumes they are case-sensitive and
+    leaves them unchanged.
+
+  -------------------------------------------------------------------
 Tue Mar 14 14:34:45 UTC 2017 - jmatejek@suse.com
 
 - merge python3 modifications
diff --git a/python-urllib3.spec b/python-urllib3.spec
index 1e78d13..dd505e4 100644
--- a/python-urllib3.spec
+++ b/python-urllib3.spec
@@ -18,7 +18,7 @@
 
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 Name:           python-urllib3
-Version:        1.20
+Version:        1.21.1
 Release:        0
 Summary:        HTTP library with thread-safe connection pooling, file post, and more
 License:        MIT
diff --git a/urllib3-1.20.tar.gz b/urllib3-1.20.tar.gz
deleted file mode 100644
index c124348..0000000
--- a/urllib3-1.20.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:97ef2b6e2878d84c0126b9f4e608e37a951ca7848e4855a7f7f4437d5c34a72f
-size 201873
diff --git a/urllib3-1.21.1.tar.gz b/urllib3-1.21.1.tar.gz
new file mode 100644
index 0000000..7d0844c
--- /dev/null
+++ b/urllib3-1.21.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b14486978518ca0901a76ba973d7821047409d7f726f22156b24e83fd71382a5
+size 224266
diff --git a/urllib3-ssl-default-context.patch b/urllib3-ssl-default-context.patch
index e35f6f9..4e406af 100644
--- a/urllib3-ssl-default-context.patch
+++ b/urllib3-ssl-default-context.patch
@@ -1,8 +1,8 @@
-Index: b/urllib3/util/ssl_.py
+Index: urllib3-1.21.1/urllib3/util/ssl_.py
 ===================================================================
---- a/urllib3/util/ssl_.py
-+++ b/urllib3/util/ssl_.py
-@@ -317,6 +317,8 @@ def ssl_wrap_socket(sock, keyfile=None,
+--- urllib3-1.21.1.orig/urllib3/util/ssl_.py
++++ urllib3-1.21.1/urllib3/util/ssl_.py
+@@ -318,6 +318,8 @@ def ssl_wrap_socket(sock, keyfile=None,
      elif getattr(context, 'load_default_certs', None) is not None:
          # try to load OS default certs; works well on Windows (require Python3.4+)
          context.load_default_certs()
diff --git a/urllib3-test-no-coverage.patch b/urllib3-test-no-coverage.patch
index 1e08d33..b6d60e2 100644
--- a/urllib3-test-no-coverage.patch
+++ b/urllib3-test-no-coverage.patch
@@ -1,7 +1,7 @@
-Index: urllib3-1.19.1/setup.cfg
+Index: urllib3-1.21.1/setup.cfg
 ===================================================================
---- urllib3-1.19.1.orig/setup.cfg
-+++ urllib3-1.19.1/setup.cfg
+--- urllib3-1.21.1.orig/setup.cfg
++++ urllib3-1.21.1/setup.cfg
 @@ -1,8 +1,5 @@
  [nosetests]
  logging-clear-handlers = true
@@ -10,4 +10,4 @@ Index: urllib3-1.19.1/setup.cfg
 -cover-erase = true
  
  [flake8]
- exclude = ./docs/conf.py,./test/*,./urllib3/packages/*
+ exclude = ./docs/conf.py,./urllib3/packages/*
diff --git a/urllib3-test-ssl-drop-sslv3.patch b/urllib3-test-ssl-drop-sslv3.patch
index 6f2baaa..6dd77ba 100644
--- a/urllib3-test-ssl-drop-sslv3.patch
+++ b/urllib3-test-ssl-drop-sslv3.patch
@@ -1,8 +1,8 @@
-Index: urllib3-1.19.1/test/with_dummyserver/test_https.py
+Index: urllib3-1.21.1/test/with_dummyserver/test_https.py
 ===================================================================
---- urllib3-1.19.1.orig/test/with_dummyserver/test_https.py
-+++ urllib3-1.19.1/test/with_dummyserver/test_https.py
-@@ -465,7 +465,7 @@ class TestHTTPS(HTTPSDummyServerTestCase
+--- urllib3-1.21.1.orig/test/with_dummyserver/test_https.py
++++ urllib3-1.21.1/test/with_dummyserver/test_https.py
+@@ -503,7 +503,7 @@ class TestHTTPS(HTTPSDummyServerTestCase
  
  class TestHTTPS_TLSv1(HTTPSDummyServerTestCase):
      certs = DEFAULT_CERTS.copy()