diff --git a/_service b/_service
index 4e2b0cc..d349903 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
git
disable
.git
- v13.3.7
+ v13.3.8
@PARENT_TAG@
enable
v(.*)
diff --git a/_servicedata b/_servicedata
index 59de21e..acc4b31 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
https://github.com/gravitational/teleport
- eb15b29fe8de273396fd337d273702837ffde208
\ No newline at end of file
+ c95e235e8855a003bbfb0e8d5b7a324f839e1ae1
\ No newline at end of file
diff --git a/teleport-13.3.7.obscpio b/teleport-13.3.7.obscpio
deleted file mode 100644
index 3bb2169..0000000
--- a/teleport-13.3.7.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d9624be0d64fcfeaf98a0cf14b77da5a88292b60f42626fe78d3d96e040fb17d
-size 265114126
diff --git a/teleport-13.3.8.obscpio b/teleport-13.3.8.obscpio
new file mode 100644
index 0000000..bcfa0bb
--- /dev/null
+++ b/teleport-13.3.8.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:99440af0a64274740002bba583ca8d7c6387947216d11855134ed1d5f9ce946b
+size 265827342
diff --git a/teleport.changes b/teleport.changes
index f191114..d2fa055 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,67 @@
+-------------------------------------------------------------------
+Wed Sep 06 05:23:21 UTC 2023 - kastl@b1-systems.de
+
+- Update to version 13.3.8:
+ * Release 13.3.8 (#31442)
+ * Added 08/31 Update (#31301)
+ * desktop discovery: unmap IPv6 addresses (#31434)
+ * fix: Skip known bad asset tags on Windows (#31412)
+ * [v13] Update device trust docs (#31328)
+ * MySQL: avoid tiny writes to improve performance in read-heavy
+ scenarios (#31402)
+ * Periodically refresh Azure cloud credentials (#31164)
+ * Periodically refresh Azure cloud credentials (#31164)
+ * AWS OIDC - List EC2: add instance id as label (#31436)
+ * Update product change log link (#31424)
+ * Fix webauthnwin c types size (#31420)
+ * Preserve query params in cross-cluster app redirect. (#31379)
+ * [v13] AWS OIDC: List Security Groups (#31272)
+ * Update e (#31384)
+ * Remove note about canceled requests not being supported
+ (#31318)
+ * [v13] docs: describe dedicated account dashboard for ent
+ (#31336)
+ * Fix plugin screen not wrapping tiles (#31365)
+ * AWS OIDC EICE: fix connection set up (#31209) (#31362)
+ * Web: return user traits with getUser request (#31331)
+ * [v13] skip motd in UI if request initiated from tsh headless
+ auth (#31205)
+ * Recommend writing the client secret to a file (#30954)
+ * bump eref (#31308)
+ * [v13] docs: add prompt field definition for OIDC auth connector
+ (#31294)
+ * [v13] docs: update db getting started and mongodb atlas
+ (#31299)
+ * [docs] update TLS routing curl test with --no-alpn (#31239)
+ * [v13] [buddy] Add an optional PodMonitor to the
+ teleport-kube-agent chart (#31247)
+ * [v13] docs: update labels documentation (#31110)
+ * Fixed typo in error message for terminal params (#31288)
+ * Clarified default cryptographic primitives (#31263)
+ * Add known STS endpoint for il-central-1 (#31282)
+ * use active db cert principals when available (#31250)
+ * Fix the access list lockName in the backend service. (#31290)
+ * docs: use variables for proxy addresses in Kube access (#31241)
+ * post-release: pass GITHUB_TOKEN for gh CLI use (#31225)
+ (#31280)
+ * UsageEvents: add OpenSSH EC2 Instance Connect Endpoint Nodes
+ (#31266)
+ * AWS OIDC - List RDS: add VPC ID (#30971) (#31274)
+ * Move the `tsh` config file guidance (#30953)
+ * [v13] Refactor IsOwner/IsMember and use AccessListMember
+ object. (#31234)
+ * Allow configurable Okta service synchronization duration.
+ (#31251)
+ * [v13] Ensure access list data integrity. (#31233)
+ * docs: update version (#31221)
+ * [v13] AWS OIDC: Create EC2 Instance Connect Endpoint (#31198)
+ * Fix ui trace forwarding (#31223)
+ * [v13] tctl acl command uses separate member calls. (#31212)
+ * [v13] Remove dead KNNRetriever class (#31189)
+ * [v13] Fix flaky tests (#31163)
+ * Fix flaky tsh export test (#31167)
+ * [v13] Don't set additional groups on darwin (#31152)
+
-------------------------------------------------------------------
Tue Sep 05 14:18:59 UTC 2023 - kastl@b1-systems.de
diff --git a/teleport.obsinfo b/teleport.obsinfo
index 21e43c7..cdd7884 100644
--- a/teleport.obsinfo
+++ b/teleport.obsinfo
@@ -1,4 +1,4 @@
name: teleport
-version: 13.3.7
-mtime: 1693341008
-commit: eb15b29fe8de273396fd337d273702837ffde208
+version: 13.3.8
+mtime: 1693939181
+commit: c95e235e8855a003bbfb0e8d5b7a324f839e1ae1
diff --git a/teleport.spec b/teleport.spec
index 477668a..6e17424 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
Name: teleport
-Version: 13.3.7
+Version: 13.3.8
Release: 0
Summary: Identity-aware, multi-protocol access proxy
License: Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 254e168..a24a1e5 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
-oid sha256:06bb2fdd269ccca838218b50ad961a5f099645557ec442c19615bdf38033a630
-size 35644641
+oid sha256:cb4d87a9d000f2f4b39ada889a3774e98e36491d07d1d07a2ad95339c823e3d3
+size 35638160