diff --git a/_service b/_service
index 7c9dc84..a1f0a8b 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
git
disable
.git
- v14.3.3
+ v14.3.4
@PARENT_TAG@
disable
v(.*)
diff --git a/teleport-14.3.3.obscpio b/teleport-14.3.3.obscpio
deleted file mode 100644
index 0e8ad62..0000000
--- a/teleport-14.3.3.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d83d1feb7ca3835142dd071f9ba671c61f6659745a769fe8f8d1d5991c569a74
-size 243041294
diff --git a/teleport-14.3.4.obscpio b/teleport-14.3.4.obscpio
new file mode 100644
index 0000000..93ca434
--- /dev/null
+++ b/teleport-14.3.4.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a125d4b2821b5e918d60cd4a48259aff5dd8936074f353d51d86e324dc32335a
+size 250530318
diff --git a/teleport.changes b/teleport.changes
index d71edca..bf547cf 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,71 @@
+-------------------------------------------------------------------
+Sat Feb 3 08:30:56 UTC 2024 - Johannes Kastl
+
+- update to 14.3.4:
+ * Skip tsh AppID pre-flight check whenever possible. #37643
+ * Update OpenSSL to 3.0.13. #37552
+ * tsh FIDO2 backend re-written for improved responsiveness and
+ reliability. #37538
+ * Do not add alphabetically first Kube cluster's name to a user
+ certificate on login. #37501
+ * Allow to replicate proxy pods when using an ingress in the
+ teleport-cluster Helm chart. #37480
+ * Fix an issue tsh uses wrong default username for auto-user
+ provisioning enabled databases in remote clusters #37418
+ * Prevent backend throttling caused by a large number of app
+ sessions. #37391
+ * Emit audit events when SFTP or SCP commands are blocked. #37385
+ * Fix goroutine leak on PostgreSQL access. #37342
+ * Fixed incompatibility between leaf clusters and ProxyJump.
+ #37319
+ * Fixed a potential crash when setting up the Connect My Computer
+ role in Teleport Connect. #37314
+ * Fixed CA key generation when two auth servers share a single
+ YubiHSM2. #37296
+ * Add support for cancelling CockroachDB requests. #37282
+ * Fix Terraform provider creating AccessLists with next audit
+ date set to Epoch. #37262
+ * Fix an issue selecting MySQL database is not reflected in the
+ audit logs. #37257
+ * The login screen will no longer be rendered for authenticated
+ users. #37230
+ * Fixed missing proxy address in GCP and Azure VM auto-discovery.
+ #37215
+ * Teleport namespace label prefixes are now sorted toward the end
+ of the labels list in the web UI. #37191
+ * Adds tbot proxy kube to support connecting to Kubernetes
+ clusters using Machine ID when the Proxy is behind a L7 LB.
+ #37157
+ * Fix a bug that was breaking web UI if automatic upgrades are
+ misconfigured. #37130
+ * Fix an issue AWS Redshift auto-provisioned user not deleted in
+ drop mode. #37036
+ * Fix an issue database auto-user provisioning fails to connect a
+ second session on MariaDB older than 10.7. #37028
+ * Improved styling of the login form in Connect and Web UI.
+ #37003
+ * Ensure that moderated sessions do not get stuck in the event of
+ an unexpected drop in the moderator's connection. #36917
+ * The web terminal now properly displays underscores on Linux.
+ #36890
+ * Fix tsh panic on Windows if WebAuthn.dll is missing. #36868
+ * Increased timeout when waiting for response from Jira API and
+ webhook to reconcile. #36818
+ * Ensure connect_to_node_attempts_total is always incremented
+ when dialing hosts. #36739
+ * Fixed a potential crash in Teleport Connect after downgrading
+ the app from v15+. #36730
+ * Prevent a goroutine leak caused by app sessions not cleaning up
+ resources properly. #36668
+ * Added tctl idp saml test-attribute-mapping command to test SAML
+ IdP attribute mapping. #36662
+ * Fixed an issue where valid SAML entity descriptors could be
+ rejected. #36485
+ * Updated SAML IdP UI to display entity ID, SSO URL and X.509
+ certificate. #3322
+ * Updated access request creation dialog to pre-select suggested
+ reviewers. #3325
+
-------------------------------------------------------------------
Mon Jan 15 19:15:12 UTC 2024 - Johannes Kastl
diff --git a/teleport.obsinfo b/teleport.obsinfo
index c973ade..e9fabdd 100644
--- a/teleport.obsinfo
+++ b/teleport.obsinfo
@@ -1,4 +1,4 @@
name: teleport
-version: 14.3.3
-mtime: 1705078875
-commit: 542fbb04b39d300d9852e5c61dac34124f7ff078
+version: 14.3.4
+mtime: 1706836945
+commit: 16b0227e84173270c01b4c5626aa4eacb46bf433
diff --git a/teleport.spec b/teleport.spec
index 9952a7c..64d19a0 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
Name: teleport
-Version: 14.3.3
+Version: 14.3.4
Release: 0
Summary: Identity-aware, multi-protocol access proxy
License: Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index d968e1d..b795fc4 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
-oid sha256:e01657727dab41d63de8b00644c37d29b4a4579170eff1b0f1094d1d797bfc6d
-size 42717361
+oid sha256:a0958fec8a210434da7268d50f103d3494f20a183fa7d3299d5a0043585d0478
+size 42726155