diff --git a/_service b/_service
index d965534..d912a05 100644
--- a/_service
+++ b/_service
@@ -11,8 +11,4 @@
   </service>
   <service name="set_version" mode="manual"/>
   <service mode="buildtime" name="tar"/>
-  <service mode="buildtime" name="recompress">
-    <param name="file">*.tar</param>
-    <param name="compression">xz</param>
-  </service>
 </services>
diff --git a/_servicedata b/_servicedata
index c3b4a80..3861354 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/openSUSE/multipath-tools.git</param>
-              <param name="changesrevision">9c6c43556abfa2cc4133cee88709cec33b1f7b83</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">cf3c1e964c0cf482cce2a32b8835be688f46841c</param></service></servicedata>
\ No newline at end of file
diff --git a/multipath-dracut.conf b/multipath-dracut.conf
new file mode 100644
index 0000000..df5d7ea
--- /dev/null
+++ b/multipath-dracut.conf
@@ -0,0 +1,2 @@
+# Make sure the tmpfiles entry exists in initramfs already
+install_items+=" @TMPFILESDIR@/multipath.conf "
diff --git a/multipath-tools-0.9.1+52+suse.be8809e.obscpio b/multipath-tools-0.9.1+52+suse.be8809e.obscpio
deleted file mode 100644
index 692cd81..0000000
--- a/multipath-tools-0.9.1+52+suse.be8809e.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ba0163b895560da7260bcd9963eac14f8141785e2077b6011803bae0581709df
-size 2731020
diff --git a/multipath-tools-0.9.2+57+suse.cf3c1e9.obscpio b/multipath-tools-0.9.2+57+suse.cf3c1e9.obscpio
new file mode 100644
index 0000000..7207e34
--- /dev/null
+++ b/multipath-tools-0.9.2+57+suse.cf3c1e9.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:10feefaa2421c540e8211aefa0baff64d3e2c736ab66e0a1e34f225d9b37e5e9
+size 2762252
diff --git a/multipath-tools.changes b/multipath-tools.changes
index 470b2b9..e5ae0a1 100644
--- a/multipath-tools.changes
+++ b/multipath-tools.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Mon Oct 24 08:22:20 UTC 2022 - Martin Wilck <mwilck@suse.com>
+
+- Update to version 0.9.2+57+suse.cf3c1e9:
+  * Fix multipathd authorization bypass and symlink attack
+    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
+  * add multipath-dracut.conf: dracut config file to install
+    tmpfiles.d/multipath.conf in initramfs
+  * Use "queue_mode bio" for NVMeoF/TCP devices
+  * Upstream bug fixes and hwtable updates
+- Drop recompress.service, it just slows down build
+
 -------------------------------------------------------------------
 Fri Sep  9 19:38:03 UTC 2022 - Martin Wilck <mwilck@suse.com>
 
diff --git a/multipath-tools.obsinfo b/multipath-tools.obsinfo
index cc2937b..7ed4049 100644
--- a/multipath-tools.obsinfo
+++ b/multipath-tools.obsinfo
@@ -1,4 +1,4 @@
 name: multipath-tools
-version: 0.9.1+52+suse.be8809e
-mtime: 1662752041
-commit: be8809e0370fab9f72ca0e3c3b642ef7ebc4ced5
+version: 0.9.2+57+suse.cf3c1e9
+mtime: 1666599331
+commit: cf3c1e964c0cf482cce2a32b8835be688f46841c
diff --git a/multipath-tools.spec b/multipath-tools.spec
index f1eb5a8..f009861 100644
--- a/multipath-tools.spec
+++ b/multipath-tools.spec
@@ -34,13 +34,13 @@
 %define libdmmp_version %(echo %{_libdmmp_version} | tr . _)
 
 Name:           multipath-tools
-Version:        0.9.1+52+suse.be8809e
+Version:        0.9.2+57+suse.cf3c1e9
 Release:        0
 Summary:        Tools to Manage Multipathed Devices with the device-mapper
 License:        GPL-2.0-only AND GPL-3.0-or-later
 Group:          System/Base
 URL:            http://christophe.varoqui.free.fr/
-Source:         multipath-tools-%{version}.tar.xz
+Source:         multipath-tools-%{version}.tar
 Source1:        multipath.conf
 # SUSE policy: disable partition deletion by default
 Source2:        dont-del-part-nodes.rules
@@ -48,6 +48,7 @@ Source2:        dont-del-part-nodes.rules
 Source3:        dm-parts.conf
 Source4:        libmpathpersist-example.c
 Source5:        libmpathpersist-example-old.c
+Source6:        multipath-dracut.conf
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %{?systemd_requires}
 BuildRequires:  libaio-devel
@@ -188,6 +189,8 @@ mkdir -p %{buildroot}/usr/lib/modules-load.d
 install -m 644 -D %{SOURCE1} "%{buildroot}/usr/lib/modules-load.d/multipath.conf"
 install -m 644 %{SOURCE2} %{buildroot}%{_udevrulesdir}/00-dont-del-part-nodes.rules
 install -m 644 -D %{SOURCE3} %{buildroot}/usr/lib/dracut/dracut.conf.d/dm-parts.conf
+install -m 644 -D %{SOURCE6} %{buildroot}/usr/lib/dracut/dracut.conf.d/multipath.conf
+sed -i 's,@TMPFILESDIR@,%{_tmpfilesdir},' %{buildroot}/usr/lib/dracut/dracut.conf.d/multipath.conf
 
 %post -n libmpath0 -p %{run_ldconfig}
 %postun -n libmpath0 -p %{run_ldconfig}
@@ -198,6 +201,7 @@ install -m 644 -D %{SOURCE3} %{buildroot}/usr/lib/dracut/dracut.conf.d/dm-parts.
 
 %post
 [ -f /.buildenv ] && exit 0
+%tmpfiles_create %{_tmpfilesdir}/multipath.conf
 %service_add_post multipathd.socket multipathd.service
 if [ $1 -eq 1 ]; then
     [ ! -x /sbin/modprobe ] || /sbin/modprobe dm_multipath || true
@@ -233,12 +237,14 @@ exit 0
 /usr/lib/modules-load.d/multipath.conf
 %dir /usr/lib/dracut
 %dir /usr/lib/dracut/dracut.conf.d
-
+/usr/lib/dracut/dracut.conf.d/multipath.conf
+%{_tmpfilesdir}/multipath.conf
 %{_mandir}/man8/multipath.8*
 %{_mandir}/man5/multipath.conf.5*
 %{_mandir}/man8/multipathd.8*
 %{_mandir}/man8/multipathc.8*
 %{_mandir}/man8/mpathpersist.8*
+%ghost /run/multipath
 
 %files -n libmpath0
 %{libdir}/libmultipath.so.0