diff --git a/nodejs-nodemon.spec b/nodejs-nodemon.spec
index 4292d46..bbacded 100644
--- a/nodejs-nodemon.spec
+++ b/nodejs-nodemon.spec
@@ -73,27 +73,26 @@ npm run test
 %{_bindir}/nodemon
 
 %changelog
-* Fri Dec 02 2022 Jan Staněk <jstanek@redhat.com> - 2.0.20-1
-- Record CVE fixed in the current or previous upstream versions
+* Mon Dec 12 2022 Jan Staněk <jstanek@redhat.com> - 2.0.20-2
+- Record remaining CVEs fixed by current rebase
   Resolves: CVE-2021-44906
 
-* Wed Nov 16 2022 Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.20-1
+* Wed Nov 09 2022 Jan Staněk <jstanek@redhat.com> - 2.0.20-1
 - Rebase to 2.0.20
-- Resolves: CVE-2022-3517
-- Resolves: #2142841
+  Resolves: CVE-2022-3517
 
 * Wed Aug 03 2022 Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.19-2
 - Switched from autosetup
 - Removed CODE_OF_CONDUCT.md and faq.md which is not present in npmjs package, might switch to GH sources in the future
-- Resolves: RHBZ#2108141
+- Resolves: RHBZ#2108140
 
 * Mon Jul 25 2022 Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.19-1
 - Rebase to 2.0.19
 - Resolves CVE-2022-33987
-- Resolves: RHBZ#2108141
+- Resolves: RHBZ#2108140
 
 * Tue Nov 30 2021 Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
-- Resolves: RHBZ#2005419
+- Resolves: RHBZ#1991322, RHBZ#1948030
 - Resolves CVE-2020-28469
 - Rebase to newest version
 - Change source to npmjs.com
diff --git a/sources b/sources
index 535de64..2104b10 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA1 (nodemon-v2.0.20-bundled.tar.gz) = 5d22c6e6d6f9c7b8f22a0286ec5e23eb1e6c3947
+SHA1 (nodemon-v2.0.20-bundled.tar.gz) = f558d7dc37c745ca2983daebe6868df6ee46c00a