diff --git a/Makefile b/Makefile
index 02d439e25b..c431b5a0e1 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,6 @@
 SHELL=/bin/bash
 export KUBERMATIC_EDITION ?= ee
-KUBERMATIC_VERSION?=v2.22.8
+KUBERMATIC_VERSION?=v2.22.9
 DOCKER_REPO ?= quay.io/kubermatic
 REPO = $(DOCKER_REPO)/dashboard$(shell [[ "$(KUBERMATIC_EDITION)" != "ce" ]] && printf -- '-%s' ${KUBERMATIC_EDITION})
 IMAGE_TAG=$(shell echo $$(git rev-parse HEAD)|tr -d '\n')
diff --git a/modules/api/Makefile b/modules/api/Makefile
index cfef7bb319..03c393f73d 100644
--- a/modules/api/Makefile
+++ b/modules/api/Makefile
@@ -1,6 +1,6 @@
 SHELL=/bin/bash
 export KUBERMATIC_EDITION ?= ee
-KUBERMATIC_VERSION?=v2.22.7
+KUBERMATIC_VERSION?=v2.22.9
 DOCKER_REPO ?= quay.io/kubermatic
 REPO = $(DOCKER_REPO)/dashboard$(shell [[ "$(KUBERMATIC_EDITION)" != "ce" ]] && printf -- '-%s' ${KUBERMATIC_EDITION})
 IMAGE_TAG=$(shell echo $$(git rev-parse HEAD)|tr -d '\n')
diff --git a/modules/api/go.mod b/modules/api/go.mod
index de2745f218..41043d81cb 100644
--- a/modules/api/go.mod
+++ b/modules/api/go.mod
@@ -102,12 +102,12 @@ replace github.com/ajeddeloh/go-json => github.com/coreos/go-json v0.0.0-2022081
 
 replace (
 	k8c.io/kubeone => k8c.io/kubeone v1.5.0-beta.0.0.20230216134849-7f23d49b8002
-	k8c.io/kubermatic/v2 => k8c.io/kubermatic/v2 v2.22.8-0.20231014142416-8295bc8819da
+	k8c.io/kubermatic/v2 => k8c.io/kubermatic/v2 v2.22.9-0.20231023125908-e11981a440f6
 )
 
 require (
 	github.com/pkg/errors v0.9.1
-	k8c.io/kubermatic/v2 v2.22.8-0.20231014142416-8295bc8819da
+	k8c.io/kubermatic/v2 v2.22.9-0.20231023125908-e11981a440f6
 )
 
 require (
diff --git a/modules/api/go.sum b/modules/api/go.sum
index c364eba4b2..1cd21de095 100644
--- a/modules/api/go.sum
+++ b/modules/api/go.sum
@@ -1350,8 +1350,8 @@ honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9
 honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 k8c.io/kubeone v1.5.0-beta.0.0.20230216134849-7f23d49b8002 h1:x94uM0sD4hyXbubuxu1qjtJHm30Qt+OnpcwL8EWbHCc=
 k8c.io/kubeone v1.5.0-beta.0.0.20230216134849-7f23d49b8002/go.mod h1:uPtvJZ2qS1Xxi+frzrW0CNB1GNsT6PQJsZBtHG2leEg=
-k8c.io/kubermatic/v2 v2.22.8-0.20231014142416-8295bc8819da h1:xJkmV7kFpFvNic3P5MP8gW9MeMOvQkmjEWJRt8969AQ=
-k8c.io/kubermatic/v2 v2.22.8-0.20231014142416-8295bc8819da/go.mod h1:n1cXKsjcUHcmL9tNQkIxXGV+WvRcv2A8BsMzIajGBsk=
+k8c.io/kubermatic/v2 v2.22.9-0.20231023125908-e11981a440f6 h1:B7XSBqdyjAjBrCVOO38zR4toI4pzlv8ptT+qZM5BWsU=
+k8c.io/kubermatic/v2 v2.22.9-0.20231023125908-e11981a440f6/go.mod h1:n1cXKsjcUHcmL9tNQkIxXGV+WvRcv2A8BsMzIajGBsk=
 k8c.io/operating-system-manager v1.2.3 h1:FRxd/1WrcEwjbn62yM/lJOcGf7ZnBoSapKrlABh4NVE=
 k8c.io/operating-system-manager v1.2.3/go.mod h1:POlB8/WtJ+RJUrnA3Nfbzej+23PlMx9OUvpSnM4fJcU=
 k8c.io/reconciler v0.3.1 h1:fZ8gFvrDxjsJ6jdKogZVX9Er980EDUYnVPuOna32d0k=
diff --git a/modules/web/package-lock.json b/modules/web/package-lock.json
index 7dcdcc3aa2..56db21cfea 100644
--- a/modules/web/package-lock.json
+++ b/modules/web/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "kubermatic-dashboard",
-  "version": "2.22.8",
+  "version": "2.22.9",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "kubermatic-dashboard",
-      "version": "2.22.8",
+      "version": "2.22.9",
       "hasInstallScript": true,
       "license": "proprietary",
       "dependencies": {
diff --git a/modules/web/package.json b/modules/web/package.json
index e585b58a03..62b11a86ce 100644
--- a/modules/web/package.json
+++ b/modules/web/package.json
@@ -1,7 +1,7 @@
 {
   "name": "kubermatic-dashboard",
   "description": "Kubermatic Dashboard",
-  "version": "2.22.8",
+  "version": "2.22.9",
   "type": "module",
   "license": "proprietary",
   "repository": "https://github.com/kubermatic/dashboard",
diff --git a/modules/web/src/assets/config/changelog.json b/modules/web/src/assets/config/changelog.json
index d97582fbeb..bd6f27db89 100644
--- a/modules/web/src/assets/config/changelog.json
+++ b/modules/web/src/assets/config/changelog.json
@@ -1,37 +1,17 @@
 {
-  "externalChangelogURL": "https://github.com/kubermatic/kubermatic/blob/main/docs/changelogs/CHANGELOG-2.22.md#v2228",
+  "externalChangelogURL": "https://github.com/kubermatic/kubermatic/blob/main/docs/changelogs/CHANGELOG-2.22.md#v2229",
   "entries": [
-    {
-      "category": "added",
-      "description": "Introduce `DisableAdminKubeconfig` flag in `KubermaticSettings` to disable the admin kubeconfig feature from dashboard."
-    },
     {
       "category": "changed",
-      "description": "Update to OSM v1.2.3."
+      "description": "Add Cilium 1.13.8 as supported CNI version, deprecate cilium version 1.13.0 as it's impacted by CVE-2023-34242."
     },
     {
       "category": "changed",
-      "description": "Update web terminal to use latest curl version (8.4.0)."
-    },
-    {
-      "category": "fixed",
-      "description": "Fix vSphere cluster validation: If a Cluster uses a custom datastore, the Seed's default datastore should not be validated."
-    },
-    {
-      "category": "fixed",
-      "description": "Operating system profile is configured correctly when updating a MachineDeployment now."
-    },
-    {
-      "category": "fixed",
-      "description": "Fix logout failing when Keycloak is used as identity provider."
-    },
-    {
-      "category": "fixed",
-      "description": "Fix the recreate nodes warning for kubevirt edit MD dialog."
+      "description": "Increase default CPU limits for KKP API/seed/master-controller-managers to prevent general slowness."
     },
     {
       "category": "fixed",
-      "description": "Fix Hetzner API response validation for server type and networks."
+      "description": "Fix node-labeller controller not applying the `x-kubernetes.io/distribution` label to RHEL nodes."
     }
   ]
 }