diff --git a/.gitignore b/.gitignore
index 8009f7d..fc0923e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,4 @@
 /oauthlib-3.1.0.tar.gz
 /python-oauthlib-3.2.0.tar.gz
 /python-oauthlib-3.2.1.tar.gz
+/python-oauthlib-3.2.2.tar.gz
diff --git a/python-oauthlib.spec b/python-oauthlib.spec
index caa1ed7..db43a54 100644
--- a/python-oauthlib.spec
+++ b/python-oauthlib.spec
@@ -2,8 +2,8 @@
 %bcond extras %{undefined rhel}
 
 Name:               python-oauthlib
-Version:            3.2.1
-Release:            6%{?dist}
+Version:            3.2.2
+Release:            1%{?dist}
 Summary:            An implementation of the OAuth request-signing logic
 
 License:            BSD-3-Clause
@@ -74,6 +74,10 @@ echo 'import pytest; __getattr__ = lambda _: pytest.skip("this test needs jwt")'
 %doc README.rst
 
 %changelog
+* Tue Sep 19 2023 Michel Lind <salimma@fedoraproject.org> - 3.2.2-1
+- Update to 3.2.2 for CVE-2022-36087
+- Fix FTBFS with Python 3.12 (rhbz#2192914)
+
 * Fri Jul 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.2.1-6
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
 
diff --git a/sources b/sources
index 7f484ef..bcf7d59 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (python-oauthlib-3.2.1.tar.gz) = 7f4ad43adc0b3d6f49c0c4224c92f59f7c1a3dfaae2a7f63403cbb93208898a3388cde1d4e87af5942d80d0390fb49b03ed2b78804f22d0f12225190f6bc7f65
+SHA512 (python-oauthlib-3.2.2.tar.gz) = c776cf6132d2155cd31c34e677984d9f5b2d113cf80232e6a28c92f43bbbfb9f1e4dc6fff4e94208438d65a4d182907cc4f2bef968d6c6c5c74f55323c3decc4