diff --git a/.gitignore b/.gitignore
index c4bb5fd..9e9acc5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -39,3 +39,5 @@
 /undici-5.10.0.tar.gz
 /node-v16.19.1-stripped.tar.gz
 /undici-5.19.1.tar.gz
+/node-v16.20.2-stripped.tar.gz
+/undici-5.20.0.tar.gz
diff --git a/nodejs.spec b/nodejs.spec
index 4f58cb5..ae827cf 100644
--- a/nodejs.spec
+++ b/nodejs.spec
@@ -47,7 +47,7 @@
 %global nodejs_epoch 1
 %global nodejs_major 16
 %global nodejs_minor 20
-%global nodejs_patch 1
+%global nodejs_patch 2
 %global nodejs_abi %{nodejs_major}.%{nodejs_minor}
 # nodejs_soversion - from NODE_MODULE_VERSION in src/node_version.h
 %global nodejs_soversion 93
@@ -721,6 +721,11 @@ end
 
 
 %changelog
+* Fri Aug 18 2023 Dominik Rehák <drehak@redhat.com> - 1:16.20.2-1
+- Rebase to 16.20.2
+  Resolves: rhbz#2231866
+  Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
+
 * Thu Jul 13 2023 Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
 - Rebase to 16.20.1
   Resolves: rhbz#2188289
diff --git a/sources b/sources
index 13dcd59..78b3847 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (node-v16.20.1-stripped.tar.gz) = ea33b6301be6c24ad631c0fc5b6df5af41a3047db8557421062561c5e0da7f67c9837a330098235a8a160f2b680fccd80931f5887745db0e6f9dbf366f1ed4f6
+SHA512 (node-v16.20.2-stripped.tar.gz) = 2450385052b70900c62ac0b585f3e885fb0766dd5755da704296a28de4febe3388b9b7ec03e5cbfd1e8b93e93f649b20aa3b0f71cce4fa89472ed341a63d8d6d
 SHA512 (icu4c-71_1-src.tgz) = 1fd2a20aef48369d1f06e2bb74584877b8ad0eb529320b976264ec2db87420bae242715795f372dbc513ea80047bc49077a064e78205cd5e8b33d746fd2a2912
 SHA512 (cjs-module-lexer-1.2.2.tar.gz) = 2c8e9caf2231ca7d61e71936305389774859aca9b5c86c63489c9a62a81f4736f99477c3f0cbb41077bb7924fdd23e0f24b7bce858e42fb0f87e7c0ffc87afeb
 SHA512 (undici-5.20.0.tar.gz) = 49fd4d9f73bd44232612963ca51e54da9e94a64504f7cbf426b3c04ec8ddcc1c4a060d7f713d9345452094039ae1b8938224bfd49bb32d0be723963b3db31edc