diff --git a/.gitignore b/.gitignore
index 6dd51a0..32620e3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,3 +21,4 @@ pam_ssh_agent_auth-0.9.2.tar.bz2
 /openssh-7.1p2.tar.gz
 /pam_ssh_agent_auth-0.10.2.tar.bz2
 /openssh-7.2p1.tar.gz
+/openssh-7.2p2.tar.gz
diff --git a/openssh.spec b/openssh.spec
index 54821aa..ae60a2f 100644
--- a/openssh.spec
+++ b/openssh.spec
@@ -65,10 +65,10 @@
 %endif
 
 # Do not forget to bump pam_ssh_agent_auth release if you rewind the main package release to 1
-%global openssh_ver 7.2p1
-%global openssh_rel 2
+%global openssh_ver 7.2p2
+%global openssh_rel 1
 %global pam_ssh_agent_ver 0.10.2
-%global pam_ssh_agent_rel 2
+%global pam_ssh_agent_rel 3
 
 Summary: An open source implementation of SSH protocol versions 1 and 2
 Name: openssh
@@ -809,6 +809,10 @@ getent passwd sshd >/dev/null || \
 %endif
 
 %changelog
+* Thu Mar 10 2016 Jakub Jelen <jjelen@redhat.com> 7.2p2-1 + 0.10.2-3
+- New upstream (security) release (#1316529)
+- Clean up audit patch
+
 * Thu Mar 03 2016 Jakub Jelen <jjelen@redhat.com> 7.2p1-2 + 0.10.2-2
 - Restore slogin symlinks to preserve backward compatibility
 
diff --git a/sources b/sources
index 24cfbd5..91a5685 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 a212baca7ce11d596bd8dcb222859ace  pam_ssh_agent_auth-0.10.2.tar.bz2
-b984775f0cfff1f7ff18b8797fce8a28  openssh-7.2p1.tar.gz
+13009a9156510d8f27e752659075cced  openssh-7.2p2.tar.gz