diff --git a/.gitignore b/.gitignore
index 8740ca5..134e8d6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -45,4 +45,6 @@ moby-v20.10.10.tar.gz
 /cli-20.10.19.tar.gz
 /moby-20.10.19.tar.gz
 /cli-20.10.20.tar.gz
-/moby-20.10.20.tar.gz
\ No newline at end of file
+/moby-20.10.20.tar.gz
+/cli-20.10.21.tar.gz
+/moby-20.10.21.tar.gz
diff --git a/moby-engine.spec b/moby-engine.spec
index b2deb4b..c5f73cc 100644
--- a/moby-engine.spec
+++ b/moby-engine.spec
@@ -7,13 +7,13 @@
 # moby
 %global goipath_moby github.com/docker/docker
 %global git_moby https://%{goipath_moby}
-%global commit_moby 03df974ae9e6c219862907efdd76ec2e77ec930b
+%global commit_moby 9fdeb9c3de2f2d9f5799be373f27b2f9df44609d
 %global shortcommit_moby %(c=%{commit_moby}; echo ${c:0:7})
 
 # cli
 %global goipath_cli github.com/docker/cli
 %global git_cli https://%{goipath_cli}
-%global commit_cli 9fdeb9c3de2f2d9f5799be373f27b2f9df44609d
+%global commit_cli baeda1f82a10204ec5708d5fbba130ad76cfee49
 %global shortcommit_cli %(c=%{commit_cli}; echo ${c:0:7})
 
 # tini
@@ -22,7 +22,7 @@
 %global shortcommit_tini %(c=%{commit_tini}; echo ${c:0:7})
 
 Name:           moby-engine
-Version:        20.10.20
+Version:        20.10.21
 Release:        1%{?dist}
 Summary:        The open-source application container engine
 License:        Apache-2.0
@@ -279,6 +279,9 @@ done
 %{_datadir}/nano/Dockerfile.nanorc
 
 %changelog
+* Wed Dec 14 2022 Dan Čermák <dan.cermak@cgc-instruments.com> - 20.10.21-1
+- Update to 20.10.21
+
 * Thu Oct 20 2022 Jan Kuparinen <copperi@fedoraproject.org> - 20.10.20-1
 - Update to 20.10.20.
 - Mitigates CVE-2022-39253
diff --git a/provides.spec.inc b/provides.spec.inc
index 1f8d4d9..1ba3707 100644
--- a/provides.spec.inc
+++ b/provides.spec.inc
@@ -2,7 +2,7 @@
 Provides:       bundled(tini-static)
 Provides:       bundled(golang(github.com/docker/docker))
 Provides:       bundled(golang(github.com/docker/cli))
-# grep -v -e '^$' -e '^#' cli-20.10.20/vendor.conf | sort | awk '{print "Provides:       bundled(golang("$1")) = "$2}'
+# grep -v -e '^$' -e '^#' cli-20.10.21/vendor.conf | sort | awk '{print "Provides:       bundled(golang("$1")) = "$2}'
 Provides:       bundled(golang(cloud.google.com/go)) = ceeb313ad77b789a7fa5287b36a1d127b69b7093
 Provides:       bundled(golang(github.com/Azure/go-ansiterm)) = d185dfc1b5a126116ea5a19e148e29d16b4574c9
 Provides:       bundled(golang(github.com/beorn7/perks)) = 37c8de3658fcb183f997c4e13e8337516ab753e6
@@ -98,13 +98,14 @@ Provides:       bundled(golang(k8s.io/klog)) = 4ad0115ba9e45c096d06a31d8dfb0e5bd
 Provides:       bundled(golang(k8s.io/kube-openapi)) = 0270cf2f1c1d995d34b36019a6f65d58e6e33ad4
 Provides:       bundled(golang(k8s.io/utils)) = 69764acb6e8e900b7c05296c5d3c9c19545475f9
 Provides:       bundled(golang(sigs.k8s.io/yaml)) = fd68e9863619f6ec2fdd8625fe1f02e7c877e480
-# grep -v -e '^$' -e '^#' moby-20.10.20/vendor.conf | sort | awk '{print "Provides:       bundled(golang("$1")) = "$2}'
+# grep -v -e '^$' -e '^#' moby-20.10.21/vendor.conf | sort | awk '{print "Provides:       bundled(golang("$1")) = "$2}'
 Provides:       bundled(golang(cloud.google.com/go)) = ceeb313ad77b789a7fa5287b36a1d127b69b7093
 Provides:       bundled(golang(code.cloudfoundry.org/clock)) = 02e53af36e6c978af692887ed449b74026d76fec
+Provides:       bundled(golang(github.com/armon/circbuf)) = 5111143e8da2e98b4ea6a8f32b9065ea1821c191
 Provides:       bundled(golang(github.com/armon/go-metrics)) = f0300d1749da6fa982027e449ec0c7a145510c3c
 Provides:       bundled(golang(github.com/armon/go-radix)) = e39d623f12e8e41c7b5529e9a9dd67a1e2261f80
 Provides:       bundled(golang(github.com/aws/aws-sdk-go)) = 2590bc875c54c9fda225d8e4e56a9d28d90c6a47
-Provides:       bundled(golang(github.com/Azure/go-ansiterm)) = d6e3b3328b783f23731bc4d058875b0371ff8109
+Provides:       bundled(golang(github.com/Azure/go-ansiterm)) = d185dfc1b5a126116ea5a19e148e29d16b4574c9
 Provides:       bundled(golang(github.com/beorn7/perks)) = 37c8de3658fcb183f997c4e13e8337516ab753e6
 Provides:       bundled(golang(github.com/bsphere/le_go)) = 7a984a84b5492ae539b79b62fb4a10afc63c7bcf
 Provides:       bundled(golang(github.com/BurntSushi/toml)) = 3012a1dbe2e4bd1391d42b32f0577cb7bbc7f005
@@ -179,11 +180,11 @@ Provides:       bundled(golang(github.com/Microsoft/opengcs)) = a10967154e143a36
 Provides:       bundled(golang(github.com/miekg/dns)) = 6c0c4e6581f8e173cc562c8b3363ab984e4ae071
 Provides:       bundled(golang(github.com/mistifyio/go-zfs)) = f784269be439d704d3dfa1906f45dd848fed2beb
 Provides:       bundled(golang(github.com/mitchellh/hashstructure)) = a38c50148365edc8df43c1580c48fb2b3a1e9cd7
-Provides:       bundled(golang(github.com/moby/buildkit)) = c014937225cba29cfb1d5161fd134316c0e9bdaa
+Provides:       bundled(golang(github.com/moby/buildkit)) = eeb7b65ab7d651770a5ec52a06ea7c96eb97a249
 Provides:       bundled(golang(github.com/moby/ipvs)) = 4566ccea0e08d68e9614c3e7a64a23b850c4bb35
 Provides:       bundled(golang(github.com/moby/locker)) = 281af2d563954745bea9d1487c965f24d30742fe
 Provides:       bundled(golang(github.com/moby/sys)) = 1bc8673b57550ddf85262eb0fed0aac651a37dab
-Provides:       bundled(golang(github.com/moby/term)) = bea5bbe245bf407372d477f1361d2ff042d2f556
+Provides:       bundled(golang(github.com/moby/term)) = 3f7ff695adc6a35abc925370dd0a4dafb48ec64d
 Provides:       bundled(golang(github.com/modern-go/concurrent)) = bacd9c7ef1dd9b15be4a9909b8ac7a4e313eec94
 Provides:       bundled(golang(github.com/modern-go/reflect2)) = 94122c33edd36123c84d5368cfb2b69df93a0ec8
 Provides:       bundled(golang(github.com/morikuni/aec)) = 39771216ff4c63d11f5e604076f9c45e8be1067b
diff --git a/sources b/sources
index 952a52d..b462bb5 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (cli-20.10.20.tar.gz) = 536c26b421fb0ca92a09ff67f4fa3afd64115ef9f748ae7fb6d3448c4c1acade72bef037f71017e9c3e039ecada95fb157d9f336ee3348be1f21874730bcb03e
+SHA512 (cli-20.10.21.tar.gz) = 951100d75c833e1c844203fe86d73d25c3164eba4fce87cc05a0ac3691851fc5341c3b32ce3814dd61bd3700d8e8e1d045a7a5651c6dc5ddc0a39c58db9bd7b3
 SHA512 (tini-de40ad0.tar.gz) = 6e21fbcc8ab0daf2f2ac407f8d85373d2873d4b1e7d010056e4dd7071183fe1ede9dadf116c520e68a6226d5eb9d5ede383729327630600ed85080c1586bf3bb
-SHA512 (moby-20.10.20.tar.gz) = f5e5bcf18fcdca8b7d5a2226091b22c14c144e632723a0ac0058d5f9bedba884cbba7bc16c06f30d9906713ec0cfa2a43839c64df9917e243122d125a4808bec
+SHA512 (moby-20.10.21.tar.gz) = de8186d191884ff678c84fefb11833205b5a46face266d432c7640bcda2677da331f74e835026c05c90df2a19d88b6e5f5acb004891049ebdec52a101d130375