diff --git a/nodejs.spec b/nodejs.spec
index b60b3eb..875aa68 100644
--- a/nodejs.spec
+++ b/nodejs.spec
@@ -30,7 +30,7 @@
 # This is used by both the nodejs package and the npm subpackage that
 # has a separate version - the name is special so that rpmdev-bumpspec
 # will bump this rather than adding .1 to the end.
-%global baserelease 2
+%global baserelease 3
 
 %{?!_pkgdocdir:%global _pkgdocdir %{_docdir}/%{name}-%{version}}
 
@@ -75,7 +75,7 @@
 %global libuv_version 1.43.0
 
 # nghttp2 - from deps/nghttp2/lib/includes/nghttp2/nghttp2ver.h
-%global nghttp2_version 1.47.0
+%global nghttp2_version 1.57.0
 
 # nghttp3 - from deps/ngtcp2/nghttp3/lib/includes/nghttp3/version.h
 %global nghttp3_major 0
@@ -723,6 +723,9 @@ end
 
 
 %changelog
+* Fri Oct 13 2023 Jan Staněk <jstanek@redhat.com> - 1:16.20.2-3
+- Update version of bundled nghttp2 in spec file
+
 * Thu Oct 12 2023 Jan Staněk <jstanek@redhat.com> - 1:16.20.2-2
 - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487)