diff --git a/CHANGES b/CHANGES
index 35ba8fbf04..c55ece9ab0 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,9 @@
+6.2.1 | 2024-05-16 10:11:49 -0700
+
+  * Update CHANGES, VERSION, and NEWS for the v6.2.1 release (Tim Wojtulewicz, Corelight)
+
+  * CI: Change spicy-head test to match master (Tim Wojtulewicz, Corelight)
+
 6.2.0-rc1.26 | 2024-05-15 15:02:19 -0700
 
   * Bump spicy submodule to v1.10.1 (Tim Wojtulewicz, Corelight)
diff --git a/NEWS b/NEWS
index 799278f2db..29016721d0 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,27 @@ This document summarizes the most important changes in the current Zeek
 release. For an exhaustive list of changes, see the ``CHANGES`` file
 (note that submodules, such as Broker, come with their own ``CHANGES``.)
 
+Zeek 6.2.1
+==========
+
+This release fixes the following bugs:
+
+- A crash with ICMP packets involving errant length checking was fixed. Thank
+  you to Ronny Barkan from Microsoft for reporting this issue.
+
+- When a shadow file is empty/missing during rotation, Zeek aborts with an error
+  message, but if the shadow file was empty, it will still be there after the
+  restart. This results in an endless restart loop. This has been corrected to
+  overwrite the existing shadow file, using the default file extension and
+  post processing function.
+
+- A new function ``remove_exclude`` was added to the ``PacketFilter`` framework
+  which can be used to remove a previously added exclude filter by name.
+
+- A new option ``--localversion`` was added to the ``configure`` script. This
+  option allows a caller to add custom strings to the end of the Zeek version
+  reported by ``zeek -v``.
+
 Zeek 6.2.0
 ==========
 
diff --git a/VERSION b/VERSION
index d9c0d0e426..024b066c0b 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-6.2.0-rc1.26
+6.2.1