diff --git a/.gitignore b/.gitignore
index 6ccac3f..3651e6b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -164,3 +164,4 @@
 /container-selinux-233e620.tar.gz
 /container-selinux-61b862a.tar.gz
 /container-selinux-99b40c5.tar.gz
+/container-selinux-563ba3f.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 1c98c5b..53410af 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -2,12 +2,12 @@
 
 # container-selinux
 %global git0 https://github.com/containers/container-selinux
-%global commit0 99b40c5013ec2720a04b1d3579ef888281714c35
+%global commit0 563ba3f2693f98de5e79a7fbf5889222ab9a454a
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # Used for comparing with latest upstream tag
 # to decide whether to autobuild (non-rawhide only)
-%define built_tag v2.163.0
+%define built_tag v2.164.1
 
 # container-selinux stuff (prefix with ds_ for version/release etc.)
 # Some bits borrowed from the openstack-selinux package
@@ -23,8 +23,8 @@
 # Hooked up to autobuilder, please check with @lsm5 before updating
 Name: container-selinux
 Epoch: 2
-Version: 2.163.0
-Release: 2.dev.git%{shortcommit0}%{?dist}
+Version: 2.164.1
+Release: 0.dev.git%{shortcommit0}%{?dist}
 License: GPLv2
 URL: %{git0}
 Summary: SELinux policies for container runtimes
diff --git a/sources b/sources
index 4c62aae..f738a28 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-99b40c5.tar.gz) = 03df7817de2a166a9377a8c0c85e00f920c66b798522e2395fad1d90605765910c165a829058e6ca19d846e75f0da6e3fbedc522fa72d6adab77227d5cb2e83c
+SHA512 (container-selinux-563ba3f.tar.gz) = fdafd3ca1094fb009893e664a2c59b81b7b95ba796ea7e960c0c2def45a0ed229f4dece63cd87faf14e6c1094848614633b322526bb2625c5df6df6abb568a50