diff --git a/_service b/_service
index 6fa56fc..191de36 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v14.2.2</param>
+    <param name="revision">v14.2.3</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">disable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
diff --git a/teleport-14.2.2.obscpio b/teleport-14.2.2.obscpio
deleted file mode 100644
index 11f9611..0000000
--- a/teleport-14.2.2.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c123c3121d928d20fb84c4027781e66f77915fff718337a4580a17a02107880e
-size 238582286
diff --git a/teleport-14.2.3.obscpio b/teleport-14.2.3.obscpio
new file mode 100644
index 0000000..adb0a2d
--- /dev/null
+++ b/teleport-14.2.3.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4a5a36dcc6823c55b07fee4ddb180c29b5ff5bfe99e91488ced3c5919cb6c766
+size 239788046
diff --git a/teleport.changes b/teleport.changes
index dc006bb..26c5e59 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,25 @@
+-------------------------------------------------------------------
+Fri Dec 15 06:33:22 UTC 2023 - Johannes Kastl <kastl@b1-systems.de>
+
+- update to 14.2.3:
+  * Prevent Cloud tenants from being a leaf cluster. #35687
+  * Added "Show All Labels" button in the unified resources list
+    view. #35666
+  * Added auto approval flow to servicenow plugin. #35658
+  * Added guided SAML entity descriptor creation when entity
+    descriptor XML is not yet available. #35657
+  * Added a connection test when enrolling a new Connect My
+    Computer resource in Web UI. #35649
+  * Fixed regression of Kubernetes Server Address when Teleport
+    runs in multiplex mode. #35633
+  * When using the Slack plugin, users will now be notified
+    directly of access requests and their approvals or denials.
+    #35577
+  * Fixed bug where configuration errors with an individual SSO
+    connector impacted other connectors. #35576
+  * Fixed client IP propagation from the Proxy to the Auth during
+    IdP initiated SSO. #35545
+
 -------------------------------------------------------------------
 Sat Dec  9 19:51:14 UTC 2023 - Johannes Kastl <kastl@b1-systems.de>
 
diff --git a/teleport.obsinfo b/teleport.obsinfo
index 1930215..54239f8 100644
--- a/teleport.obsinfo
+++ b/teleport.obsinfo
@@ -1,4 +1,4 @@
 name: teleport
-version: 14.2.2
-mtime: 1702053864
-commit: cb615fe417c29f1d0e216142d6f1dd7fad4e33fa
+version: 14.2.3
+mtime: 1702593530
+commit: 22e50b45420e7e4775e91c36650b81253210791c
diff --git a/teleport.spec b/teleport.spec
index 110c775..11cab71 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           teleport
-Version:        14.2.2
+Version:        14.2.3
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index d017011..3352a09 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:bd58f08a1d44319651d8e7fc1b10648a10f20075e9accdbfe0fb2b911c819926
-size 39741516
+oid sha256:66e6d3c12eb28f99fb0c2128df1036a55103734c0e4fb1f3a821a22639ef16bc
+size 39744634