diff --git a/_service b/_service
index 85378a0..9b8e4ff 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v10.2.1</param>
+    <param name="revision">v10.2.2</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
@@ -25,6 +25,6 @@
     <param name="compression">gz</param>
   </service>
   <service name="go_modules" mode="disabled">
-    <param name="archive">teleport-10.2.1.tar.gz</param>
+    <param name="archive">teleport-10.2.2.tar.gz</param>
   </service>
 </services>
diff --git a/_servicedata b/_servicedata
index 343e056..c7ae7ff 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/gravitational/teleport</param>
-              <param name="changesrevision">25604691898f57a20a09f0cb8bfadb10671b9829</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">dd70f8a025a424970494a8a09159277101a420c0</param></service></servicedata>
\ No newline at end of file
diff --git a/teleport-10.2.1.tar.gz b/teleport-10.2.1.tar.gz
deleted file mode 100644
index beced1e..0000000
--- a/teleport-10.2.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:db285851a9f28a834a641457d45036350d145338d41dd288635cc360d1ad74c1
-size 104189390
diff --git a/teleport-10.2.2.tar.gz b/teleport-10.2.2.tar.gz
new file mode 100644
index 0000000..b1a952b
--- /dev/null
+++ b/teleport-10.2.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3790d876a07bcafc931208c88c9894838247f61f86d7983f792a1238bbd14e30
+size 104494807
diff --git a/teleport.changes b/teleport.changes
index a905976..6a91566 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,50 @@
+-------------------------------------------------------------------
+Wed Sep 21 08:27:17 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 10.2.2:
+  * Release 10.2.2 (#16469)
+  * update e-ref
+  * rework cmd registration
+  * Add EC2 joining for Windows Desktop Service (#16438)
+  * Fix incorrect PagerDuty guide redirect (#15917)
+  * [v10] VSCode remote ssh extension settings (#16462)
+  * Add documentation for Event Handler chart (#15662)
+  * adding video banner to mssql server db quide (#16420)
+  * Fix minor issues that impact SEO (#15920)
+  * Fix auditd status on older kernels (#16448)
+  * [v10] Fix `known_hosts` locking by refactoring our locks in `utils/fs` (#16441)
+  * [v10] Nodes use FIPS STS endpoints for IAM join method when in FIPS mode (#16374)
+  * Added 09/15 Upcoming Releases Update
+  * operator: Fix flaky drift tests (#15815) (#16338)
+  * Add `where` predicate and Machine ID support to SSH host certificates (#16261) (#16427)
+  * [v10] helm: support Kubernetes 1.25 (#16343)
+  * Capture stderr from "tsh db connect" and reformat redis error (#13843) (#16416)
+  * [v10] Rephrase docs on moderated sessions backward compatibility (#16349)
+  * Remove Stripe from `Content-Security-Policy` header (#16390)
+  * Unhide tctl alert create (#16290)
+  * Add Default Allow Rules for new resources (#16237) (#16399)
+  * [v10] Prevent ssh.Session SendRequest from wrapping payload twice (#16171)
+  * [v10] Correct hsm service docs command (#16405)
+  * [v10] docs: fix joinParams reference (#16381)
+  * [v10] ci: Add paths/paths-ignore to GitHub Actions workflows to reduce unnecessary builds (#15708)
+  * [v10] Kubernetes Exec via Websockets (#16282)
+  * Documentation for AWS API access (#14429) (#16066)
+  * Use tracing handler per server not per route (#16372)
+  * [v10] Document `tbot configure` (#16373)
+  * [v10] Add /webapi/sites/:site/alerts endpoint to the apiserver (#16336)
+  * updates changelog to document when rdp licensing negotiation was added (#16340)
+  * Fix `TestTokenGeneration` flakiness (#15090) (#16362)
+  * [v10] backport #16136 and #16151 (#16213)
+  * [v10] Wrap `desktopplayback` endpoint with `WithClusterAuth` rather than `WithAuth` (#16292)
+  * [v10] Adds warning about directories blocked from being shared (#16328)
+  * [v10] Clarify access denied due to Teleport role permission (#16331)
+  * [v10] Dial by UUID for label based ssh (#16324)
+  * spell fixes (#16166)
+  * [v10] docs: Add missing commands key to dynamic labels in reference (#16294)
+  * Update on-prem docs version (#16313)
+  * Tweak TestAgentForward (#16304)
+  * changelog: fix moderated sessions typo (#16222)
+
 -------------------------------------------------------------------
 Tue Sep 13 12:46:41 UTC 2022 - kastl@b1-systems.de
 
diff --git a/teleport.spec b/teleport.spec
index d5bc984..a807514 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           teleport
-Version:        10.2.1
+Version:        10.2.2
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index eda11c7..a858c3b 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:c407c77c194553be4753b942907917dc927ea8d0c2a05ba49c19d77c3ef9e1c5
-size 23496159
+oid sha256:c60332c13db49f2188e1587f063949122df4a40bee4431b1b9f69f3389b51220
+size 23503504
diff --git a/webassets.tar.gz b/webassets.tar.gz
index 481ce79..4ee049b 100644
--- a/webassets.tar.gz
+++ b/webassets.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:cdd5caab2c4d1bdceadf29820307f5893e0a4c953f6dc96cb6052c19ac46f429
-size 4202085
+oid sha256:4d42359bd04d5473823e9ec880738c75d939911ad55c4f5d19390584f38653dc
+size 4202429