diff --git a/CHANGELOG.md b/CHANGELOG.md
index 067a0f1d..a51d9e61 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,27 @@
+# Version 0.21.2 (2026-09-05)
+
+This is a bugfix release.
+
+## Bug fixes / improvements
+
+- Fix an out-of-bounds panic parsing a truncated HINFO record: `read_char_string` now
+  checks that the length octet is present instead of indexing past the end of the packet.
+  Found by fuzzing the packet parser. (#499, commit `c65dd3c`)
+- Remove the raw packet dump from parse-failure messages, which is no longer needed for
+  triage and can be troublesome when the packet is large. (#501, commit `30a22cf`)
+- Remove the duplicated TXT decoding in `dns_parser`: it now uses the canonical
+  `TxtProperty` in `service_info` instead of its own copy. (#500, commit `a6af4b5`)
+- Add fuzzing support under `fuzz/` with a `parse_packet` target covering
+  `DnsIncoming::new`, plus a fuzz build in CI. Publishing is unaffected: `cargo package`
+  still excludes `fuzz/`. (#502, commit `3656343`)
+
+## All changes
+
+* `c65dd3c 2026-09-03` fix: out-of-bounds panic parsing a truncated HINFO record (#499) (keepsimple1)
+* `a6af4b5 2026-09-03` refactoring: remove the duplicated TXT decoding in dns_parser (#500) (keepsimple1)
+* `30a22cf 2026-09-04` fix: bound the raw packet dump in parse-failure messages (#501) (keepsimple1)
+* `3656343 2026-09-04` tests: add fuzzing support with a packet parser target (#502) (keepsimple1)
+
 # Version 0.21.1 (2026-08-30)
 
 This is a bugfix release.
diff --git a/Cargo.toml b/Cargo.toml
index 123abe69..98c71fda 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "mdns-sd"
-version = "0.21.1"
+version = "0.21.2"
 authors = ["keepsimple <keepsimple@gmail.com>"]
 edition = "2018"
 rust-version = "1.71.0"