diff --git a/_service b/_service
index bf02d93..fc0ff22 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v15.2.2</param>
+    <param name="revision">v15.2.4</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">disable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
diff --git a/teleport-15.2.2.obscpio b/teleport-15.2.2.obscpio
deleted file mode 100644
index 0f9f196..0000000
--- a/teleport-15.2.2.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:139c4482dccfb5901e2876d7cec1bcc761dcf799dfb080787a43c30f2f2c70c5
-size 249049102
diff --git a/teleport-15.2.4.obscpio b/teleport-15.2.4.obscpio
new file mode 100644
index 0000000..fe2d4e6
--- /dev/null
+++ b/teleport-15.2.4.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:be9cf855d9ebd74bc7b7254e20f0c37699217a47f3e9e6419e37fe7460b816bc
+size 252724238
diff --git a/teleport.changes b/teleport.changes
index f1653a0..2cf9650 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,56 @@
+-------------------------------------------------------------------
+Thu Apr 25 05:34:37 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- update to 15.2.4 (skipping non-existing release 15.2.3):
+  * Fixed a deprecation warning being shown when tbot is used with
+    OpenSSH. #40837
+  * Added a new Audit log event that is emitted when an Agent or
+    Bot request to join the cluster is denied. #40814
+  * Fixed regenerating cloud account recovery codes. #40786
+  * Changed UI for the sign-up and authentication reset flows.
+    #40773
+  * Added a new Prometheus metric to track requests initiated by
+    Teleport against the control plane API. #40754
+  * Fixed an issue that prevented uploading a zip file larger than
+    10MiB when updating an AWS Lambda function via tsh app access.
+    #40737
+  * Patched CVE-2024-32650. #40735
+  * Fixed possible data race that could lead to concurrent map read
+    and map write while proxying Kubernetes requests. #40720
+  * Fixed access request promotion of windows_desktop resources.
+    #40712
+  * Fixed spurious ambiguous host errors in ssh routing. #40706
+  * Patched CVE-2023-45288 and CVE-2024-32473. #40695
+  * generic "not found" errors are returned whether a remote
+    cluster can't be found or access is denied. #40681
+  * Fixed a resource leak in the Teleport proxy server when using
+    proxy peering. #40672
+  * Added Azure CLI access support on AKS with Entra Workload ID.
+    #40660
+  * Allow other issue types when configuring JIRA plugin. #40644
+  * Added regexp.match to access request filter and where
+    expressions. #40642
+  * Notify the requester in slack review request messages. #40624
+  * Handle passwordless in MFA audit events. #40617
+  * Added auto discover capability to EC2 enrollment in the web UI.
+    #40605
+  * Fixes RDP licensing. #40595
+  * Added support for the ascii variants of smartcard calls. #40566
+  * Added the ability to configure labels that should be set on the
+    Kubernetes secret when using the kubernetes_secret destination
+    in tbot. #40550
+  * Updated cosign to address CVE-2024-29902 and CVE-2024-29903.
+    #40497
+  * The Web UI now supports large number of roles by paginating
+    them. #40463
+  * Improved the responsiveness of the session player during long
+    periods of idle time. #40442
+  * Fixed incorrect format for database_object_import_rule
+    resources with non-empty expiry. #40203
+  * Updated Opsgenie annotations so approve-schedules is used for
+    both alert creation and auto approval if notify schedules is
+    not set. #40121
+
 -------------------------------------------------------------------
 Sat Apr 13 09:36:55 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
 
diff --git a/teleport.obsinfo b/teleport.obsinfo
index 00d81dc..148341e 100644
--- a/teleport.obsinfo
+++ b/teleport.obsinfo
@@ -1,4 +1,4 @@
 name: teleport
-version: 15.2.2
-mtime: 1712867327
-commit: a4cffd5b7fb8f65a417ce74b42e2f0fbe048c716
+version: 15.2.4
+mtime: 1713922041
+commit: e103ec47ce8f4c30590962f8d9c5a19e4367bae8
diff --git a/teleport.spec b/teleport.spec
index 741630e..0edc271 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           teleport
-Version:        15.2.2
+Version:        15.2.4
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index d12a7d8..0fa009b 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ba6584af0f401edf139a7cbd713e05cea5b7cb64ae3e88ec16ae656812242c75
-size 44363518
+oid sha256:7b108b6eebf56e360909063d5fac7c09987c0a7a37f92095ca5758fd48dafa29
+size 44778548