diff --git a/nginx.spec b/nginx.spec
index 444ba41..81f3dbc 100644
--- a/nginx.spec
+++ b/nginx.spec
@@ -40,7 +40,7 @@
 
 Name:              nginx
 Epoch:             1
-Version:           1.21.1
+Version:           1.21.2
 Release:           1%{?dist}
 
 Summary:           A high performance web server and reverse proxy server
@@ -351,7 +351,7 @@ install -p -d -m 0755 %{buildroot}%{_sysconfdir}/nginx/default.d
 
 install -p -d -m 0700 %{buildroot}%{_localstatedir}/lib/nginx
 install -p -d -m 0700 %{buildroot}%{_localstatedir}/lib/nginx/tmp
-install -p -d -m 0700 %{buildroot}%{_localstatedir}/log/nginx
+install -p -d -m 0711 %{buildroot}%{_localstatedir}/log/nginx
 
 install -p -d -m 0755 %{buildroot}%{_datadir}/nginx/html
 install -p -d -m 0755 %{buildroot}%{nginx_moduleconfdir}
@@ -575,6 +575,9 @@ fi
 
 
 %changelog
+* Fri Sep 03 2021 Felix Kaechele <heffer@fedoraproject.org> - 1:1.21.2-1
+- update to 1.21.2
+
 * Tue Aug 10 2021 Neal Gompa <ngompa@datto.com> - 1:1.20.1-6
 - Add -mod-devel subpackage for building external nginx modules (rhbz#1989778)
 
diff --git a/sources b/sources
index c87e364..1f8bc43 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (nginx-1.21.1.tar.gz) = 4fee94e9981abf4506cc3a24053828e81c763e98a3704b1cc54944cf09b49269a04495aca154b2dc6e065551d60f3f9f219659e93056b67952ecf8d07f9fcd98
-SHA512 (nginx-1.21.1.tar.gz.asc) = 994ddfc6a9996180aefdeec50a4d9f209858a97fe9874252ee1bc41966ddb0f076a4b2ba0151ef12056c978c522a2695f200e2260959991cbc45e797ee7a307a
+SHA512 (nginx-1.21.2.tar.gz) = 5fa9c8f3a1bd9366b30de2bdbbd5baef47381e6d8672341ed601116baeb077ea1b596716ca06ec03d8a2773a437b78acd408084e49ba239f74de915f1b7fb8a5
+SHA512 (nginx-1.21.2.tar.gz.asc) = 45302faeb29a787b6f9ce469b9ad31daca21693fa83298f4ccdc1a4a5a6d2057d496e5016a9fe5b13c0d33ced99b26aff585b798bb244f78cec4d8cc5cb44080