diff --git a/_service b/_service
index c2884cd..da59778 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v11.2.1</param>
+    <param name="revision">v11.2.2</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
@@ -26,6 +26,6 @@
     <param name="compression">gz</param>
   </service>
   <service name="go_modules" mode="disabled">
-    <param name="archive">teleport-11.2.1.tar.gz</param>
+    <param name="archive">teleport-11.2.2.tar.gz</param>
   </service>
 </services>
diff --git a/_servicedata b/_servicedata
index b138e49..1c2a980 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/gravitational/teleport</param>
-              <param name="changesrevision">999ff610be62036ee3ffe625f9ac56981e8840bb</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">90bde73bcfaad2722ad0811924b7d6c88e7eb5e2</param></service></servicedata>
\ No newline at end of file
diff --git a/teleport-11.2.1.tar.gz b/teleport-11.2.1.tar.gz
deleted file mode 100644
index cab8edf..0000000
--- a/teleport-11.2.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7ecb6fbcce3d2e7ab85488c081fea47fdde156036b84fb67228925965335d13f
-size 118825770
diff --git a/teleport-11.2.2.tar.gz b/teleport-11.2.2.tar.gz
new file mode 100644
index 0000000..b2f7e12
--- /dev/null
+++ b/teleport-11.2.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7c2495f1550b04f1782ad56472590131a1dec54c150c01b4ab66c48e50b260cc
+size 119739095
diff --git a/teleport.changes b/teleport.changes
index e14cd11..f12dd7e 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,45 @@
+-------------------------------------------------------------------
+Fri Jan 20 10:08:52 UTC 2023 - kastl@b1-systems.de
+
+- Update to version 11.2.2:
+  * Release 11.2.2 (#20363)
+  * [auto] Update webassets in teleport/branch/v11 from webassets/teleport-v11 (#20375)
+  * Remove invalid commands on login with ssh port (#20364)
+  * spell fixes (#20279)
+  * [v11] Add Connect docs about linking tsh (#20029)
+  * Validate AWS regions when configuring the AWSMatcher (#20288)
+  * Add redirects to the new Audit Events section (#19553) (#19968)
+  * [v11] Point at source version in docs rather then generic master. (#20303)
+  * [v11] [Docs] Use gravitational.com to download checksums. (#20282)
+  * Added binary signing for darwin tarballs - branch/v11 backport (#20305)
+  * [v11] Machine ID and GitHub Actions docs copy improvements (#20291)
+  * Add mysql conn tester (#20177) (#20230)
+  * fix: Always dial to root cluster for single-use certificates (#20238)
+  * [v11] Set extra proxy headers in all `tsh` HTTP requests (#20071)
+  * [v11] Updates to cloud getting started (#20256)
+  * Update Rust to 1.66.1 (#20201)
+  * Bump Buf to v1.12.0 (#20194)
+  * [v11] Stop heartbeating during graceful shutdown (#20225)
+  * [v11] docs: add overview of session recording (#19934)
+  * [v11] Use pre-generated RSA keys in tests (#19448)
+  * [v11] Document GitHub Actions and Kubernetes (#20179)
+  * fixes ldap filter example (#20223)
+  * [v11] Update Linux install package link for Cloud (#20210)
+  * Grant the built-in kube role semaphore permissions (#20174)
+  * Adds a post-delete hook to delete the `kube-agent` state secrets (#20169)
+  * Stablize RemoteConnCleanup (#20048) (#20086)
+  * [v11] Change the application access authentication flow (#20165)
+  * Bump cloud version to 11.2.1 (#20157)
+  * [v11] capture additional prehog events (#20114)
+  * Ensure Proxy uses cache for periodic operations (#20153)
+  * Add kube and windows_desktop tctl tokens add handling (#20139)
+  * Added 01/12 Upcoming Releases Update (#20137)
+  * [v11] feat: add login rule service proto definition  (#20112)
+  * [v11] Trim error messages on UserLogin events (#20125)
+  * [v11] Fix `certificate signed by unknown authority` after reconciling a dynamic RDS resource (#20099)
+  * Update to 11.2.1 for docs (#20117)
+  * Fix CertificateInvalidError in formatCertError (#20052)
+
 -------------------------------------------------------------------
 Thu Jan 12 06:03:42 UTC 2023 - kastl@b1-systems.de
 
diff --git a/teleport.spec b/teleport.spec
index da60dfc..2579a93 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           teleport
-Version:        11.2.1
+Version:        11.2.2
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 34d1abe..2583b3f 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:1c86aef08e4c031563be1850202f1a46b51995439c08310a1c0fc6b61c5ba9f2
-size 30953927
+oid sha256:689c65b461870b9f89ec13268652b3455cd1e20e880035c98ae6680057686681
+size 30956702
diff --git a/webassets.tar.gz b/webassets.tar.gz
index 14ac6e0..db2704a 100644
--- a/webassets.tar.gz
+++ b/webassets.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:0e89810ab484db5eb4ccdc49f0011ea7b8118df1316c11359284f9439e846803
-size 4314722
+oid sha256:8ebfa06d9f41722ae86b5e39b2b995fbb0b58f159980272e9fa01c967916b7de
+size 4315327