diff --git a/_service b/_service
index c6246a5..aef962e 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v17.2.8</param>
+    <param name="revision">v17.2.9</param>
     <param name="match-tag">v*</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
diff --git a/teleport-17.2.8.obscpio b/teleport-17.2.8.obscpio
deleted file mode 100644
index 1372d3e..0000000
--- a/teleport-17.2.8.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:51b6f670e0357322e0bcc6b637fc4f89526e897aea1e41cd3a53f6364c312640
-size 270813198
diff --git a/teleport-17.2.9.obscpio b/teleport-17.2.9.obscpio
new file mode 100644
index 0000000..9d69637
--- /dev/null
+++ b/teleport-17.2.9.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:823a920a381111e9fb92088a4545c710089212ac6e745e207b371b6e3a21f8b8
+size 271173646
diff --git a/teleport.changes b/teleport.changes
index 6b43b91..5053e08 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Wed Feb 26 05:56:01 UTC 2025 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- update to 17.2.9:
+  * Updated go-jose/v4 to v4.0.5 (addresses CVE-2025-27144). #52467
+  * Updated /x/crypto and /x/oauth2 (addresses CVE-2025-22869 and
+    CVE-2025-22868). #52437
+  * Fixed missing audit event on GitHub proxy RBAC failure. #52427
+  * Allow to provide tbot configurations via environment variables.
+    Update tbot-distroless image to run start command by default.
+    #52351
+  * Logging out from a cluster no longer clears the client
+    autoupdate binaries. #52337
+  * Added tctl installer for Identity Center integration. #52336
+  * Added JSON response support to the /webapi/auth/export public
+    certificate API endpoint. #52325
+  * Resolves an issue with tbot where the web proxy port would be
+    used instead of the SSH proxy port when ports separate mode is
+    in use. #52291
+  * Fix Azure SQL Servers connect failures when the database agent
+    runs on a VM scale set. #52267
+  * Add filter drop-downs and pinning support for the "Enroll a New
+    Resource" page in the web UI. #52176
+  * Improve latency and reduce resource consumption of generating
+    Kubernetes certificates via tctl auth sign and tsh kube login.
+    #52146
+
 -------------------------------------------------------------------
 Thu Feb 20 09:40:13 UTC 2025 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
 
diff --git a/teleport.obsinfo b/teleport.obsinfo
index 34f9f9f..e077c58 100644
--- a/teleport.obsinfo
+++ b/teleport.obsinfo
@@ -1,4 +1,4 @@
 name: teleport
-version: 17.2.8
-mtime: 1740020546
-commit: 4504397699354779fe09b54208b8ee0494bf33ad
+version: 17.2.9
+mtime: 1740509854
+commit: 6b86200a6e27cbefb7a1b63d39fa8ef049f1d677
diff --git a/teleport.spec b/teleport.spec
index ed9af28..65ba2b1 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -17,7 +17,7 @@
 
 
 Name:           teleport
-Version:        17.2.8
+Version:        17.2.9
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        AGPL-3.0-only
diff --git a/vendor.tar.gz b/vendor.tar.gz
index d01ea19..d414a5b 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:9df8b6087c1a58c0cbfe1360e00d1a5bb55c877d783d23186f04d3d9df760ca7
-size 52741808
+oid sha256:7476dc88b05ab279b02796bc1c64c5ead3fcd30368369e521088cd11aef04206
+size 52747518
diff --git a/vendor.tar.zst b/vendor.tar.zst
index 0d3acdc..467c418 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:849c43cb38ad0e8fd3eee4c05ea6e320e4fb3a3dc96484ef84c4024501b8180c
-size 732674
+oid sha256:2aeb68d4cf9cfb2b4259e5860ff446f2de0db1f9bc0dada91788928790345a58
+size 734568