diff --git a/salt/common/init.sls b/salt/common/init.sls
index cf791cfa2..02bc4d1fa 100644
--- a/salt/common/init.sls
+++ b/salt/common/init.sls
@@ -111,7 +111,8 @@ heldpackages:
   pkg.installed:
     - pkgs:
       - containerd.io: 1.2.13-2
-      - docker-ce: 5:19.03.12~3-0~ubuntu-bionic
+      - docker-ce: 5:19.03.14~3-0~ubuntu-bionic
+      - docker-ce-cli: 5:19.03.14~3-0~ubuntu-bionic
     - hold: True
     - update_holds: True
 
@@ -147,7 +148,8 @@ heldpackages:
   pkg.installed:
     - pkgs:
       - containerd.io: 1.2.13-3.2.el7
-      - docker-ce: 3:19.03.12-3.el7
+      - docker-ce: 3:19.03.14-3.el7
+      - docker-ce-cli: 3:19.03.14-3.el7
     - hold: True
     - update_holds: True
 {% endif %}
diff --git a/setup/so-functions b/setup/so-functions
index e8360c671..c1330bf43 100755
--- a/setup/so-functions
+++ b/setup/so-functions
@@ -821,9 +821,9 @@ docker_install() {
 			  yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo;
 			fi
 			if [[ ! $is_iso ]]; then
-			  yum -y install docker-ce-19.03.12-3.el7 containerd.io-1.2.13-3.2.el7;
+			  yum -y install docker-ce-19.03.14-3.el7 containerd.io-1.2.13-3.2.el7;
 			fi
-			yum versionlock docker-ce-19.03.12-3.el7;
+			yum versionlock docker-ce-19.03.14-3.el7;
 			yum versionlock containerd.io-1.2.13-3.2.el7
 		} >> "$setup_log" 2>&1