diff --git a/_service b/_service
index fcd79ba..6fa56fc 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v14.2.1</param>
+    <param name="revision">v14.2.2</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">disable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
diff --git a/teleport-14.2.1.obscpio b/teleport-14.2.1.obscpio
deleted file mode 100644
index bda00aa..0000000
--- a/teleport-14.2.1.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:446511733f9b4b2b3e577f130e4f471ac87d3c239b4787c7d9e4f34cdf3941b0
-size 236809742
diff --git a/teleport-14.2.2.obscpio b/teleport-14.2.2.obscpio
new file mode 100644
index 0000000..11f9611
--- /dev/null
+++ b/teleport-14.2.2.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c123c3121d928d20fb84c4027781e66f77915fff718337a4580a17a02107880e
+size 238582286
diff --git a/teleport.changes b/teleport.changes
index 2c7f92c..dc006bb 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,38 @@
+-------------------------------------------------------------------
+Sat Dec  9 19:51:14 UTC 2023 - Johannes Kastl <kastl@b1-systems.de>
+
+- update to 14.2.2:
+  * Prevent panic when dialing a deleted Application Server. #35525
+  * Fixed regression issue with arm32 binaries in 14.2.1 having
+    higher glibc requirements. #35539
+  * Fixed GCP VM auto-discovery not using instances' internal IP
+    address. #35521
+  * Calculate latency of Web SSH sessions and report it to users.
+    #35516
+  * Fix bot's unable to view or approve access requests issue.
+    #35512
+  * Fix querying of large audit events with Athena backend. #35483
+  * Fix panic on potential nil value when requesting
+    /webapi/presetroles. #35463
+  * Add insecure-drop host user creation mode. #35403
+  * IAM permissions for rds:DescribeDBProxyTargets are no longer
+    required for RDS Proxy discovery. #35389
+  * Update Go to 1.21.5. #35371
+  * Desktop connections default to RDP port 3389 if not otherwise
+    specified. #35343
+  * Add cluster_auth_preferences to the shortcuts for
+    cluster_auth_preference. #35329
+  * Make the podSecurityPolicy configurable in the
+    teleport-kube-agent chart. #35320
+  * Prevent EKS fetcher not having correct IAM permissions from
+    stopping whole Discovery service start up. #35319
+  * Add database automatic user provisioning support for
+    self-hosted MongoDB. #35317
+  * Improve the resilience of tbot to misconfiguration of auth
+    connectors when generating a Kubernetes output. #35309
+  * Fix crash when writing kubeconfig with tctl auth sign --tar.
+    #34874
+
 -------------------------------------------------------------------
 Fri Dec  1 06:22:19 UTC 2023 - Johannes Kastl <kastl@b1-systems.de>
 
diff --git a/teleport.obsinfo b/teleport.obsinfo
index d3e46dd..1930215 100644
--- a/teleport.obsinfo
+++ b/teleport.obsinfo
@@ -1,4 +1,4 @@
 name: teleport
-version: 14.2.1
-mtime: 1701392054
-commit: e6737fe00510a9fb8c5f240bc04d708d1142bee0
+version: 14.2.2
+mtime: 1702053864
+commit: cb615fe417c29f1d0e216142d6f1dd7fad4e33fa
diff --git a/teleport.spec b/teleport.spec
index 3794f82..110c775 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           teleport
-Version:        14.2.1
+Version:        14.2.2
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 9860955..d017011 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:8087a39ac441b753fdef479103bd6e5981a08f2203bd029477fb48e5f91f1484
-size 39740636
+oid sha256:bd58f08a1d44319651d8e7fc1b10648a10f20075e9accdbfe0fb2b911c819926
+size 39741516