diff --git a/xwayland-23.2.1.tar.xz b/xwayland-23.2.1.tar.xz
deleted file mode 100644
index 1c54e1d..0000000
--- a/xwayland-23.2.1.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:eebc2692c3aa80617d78428bc6ec7b91b254a98214d2a70e997098503cd6ef90
-size 1298128
diff --git a/xwayland-23.2.1.tar.xz.sig b/xwayland-23.2.1.tar.xz.sig
deleted file mode 100644
index 90bbbd2..0000000
Binary files a/xwayland-23.2.1.tar.xz.sig and /dev/null differ
diff --git a/xwayland-23.2.2.tar.xz b/xwayland-23.2.2.tar.xz
new file mode 100644
index 0000000..e6442f8
--- /dev/null
+++ b/xwayland-23.2.2.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9f7c0938d2a41e941ffa04f99c35e5db2bcd3eec034afe8d35d5c810a22eb0a8
+size 1298400
diff --git a/xwayland-23.2.2.tar.xz.sig b/xwayland-23.2.2.tar.xz.sig
new file mode 100644
index 0000000..087933e
Binary files /dev/null and b/xwayland-23.2.2.tar.xz.sig differ
diff --git a/xwayland.changes b/xwayland.changes
index d41e424..6750086 100644
--- a/xwayland.changes
+++ b/xwayland.changes
@@ -1,3 +1,25 @@
+-------------------------------------------------------------------
+Wed Oct 25 10:39:17 UTC 2023 - Stefan Dirsch <sndirsch@suse.com>
+
+- Update to version 23.2.2
+  * This release contains the fix for CVE-2023-5367 in today's security
+    advisory: https://lists.x.org/archives/xorg-announce/2023-October/003430.html
+    Xwayland does not support multiple protocol screens (Zaphod) and is thus
+    not affected by CVE-2023-5380.
+  * Additionally, there is a change in the default behaviour of Xwayland:
+    Since version 23.2.0 Xwayland (via liboeffis) automatically tries to
+    connect to the XDG Desktop Portal's RemoteDesktop interface to obtain
+    the EI socket. That socket is used to send XTest events to the
+    compositor.
+  * However, the connection to the session-wide Portal is unsuitable when
+    Xwayland is running in a nested compositor. Xwayland cannot tell whether
+    it's running on a nested compositor and to keep backwards compatibility
+    with Xwayland prior to 23.2.0, Xwayland must now be started with
+    "-enable-ei-portal" to connect to the portal.
+  * Compositors (who typically spawn Xwayland rootless) must now pass this
+    option to get the same behaviour as 23.2.x.
+  * Finally, Xwayland now uses libbsd-overlay instead of libbsd.
+
 -------------------------------------------------------------------
 Wed Sep 20 08:53:56 UTC 2023 - Stefan Dirsch <sndirsch@suse.com>
 
diff --git a/xwayland.keyring b/xwayland.keyring
index 779646a..ec70e44 100644
Binary files a/xwayland.keyring and b/xwayland.keyring differ
diff --git a/xwayland.spec b/xwayland.spec
index e5a45b1..1e89290 100644
--- a/xwayland.spec
+++ b/xwayland.spec
@@ -24,7 +24,7 @@
 %endif
 
 Name:           xwayland
-Version:        23.2.1
+Version:        23.2.2
 Release:        0
 URL:            http://xorg.freedesktop.org
 Summary:        Xwayland Xserver