diff --git a/.gitignore b/.gitignore
index 041a4e4..511bfce 100644
--- a/.gitignore
+++ b/.gitignore
@@ -46,3 +46,4 @@
 /container-selinux-55c7d4d.tar.gz
 /container-selinux-d248f91.tar.gz
 /container-selinux-d213769.tar.gz
+/container-selinux-701557f.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 7e67c30..dcd40e5 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora} || 0%{?rhel} > 7
-%global commit0 d2137698cba817ee241a02210b7d63473bd38233
+%global commit0 701557f1cd94a488a191215db04123ae533c5142
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
@@ -36,8 +36,8 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos} || 0%{?rhel} > 7
 Epoch: 2
 %endif
-Version: 2.58
-Release: 2.git%{shortcommit0}%{?dist}
+Version: 2.59
+Release: 1.git%{shortcommit0}%{?dist}
 License: GPLv2
 URL: %{git0}
 Summary: SELinux policies for container runtimes
@@ -127,6 +127,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Mon May 21 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.59-1
+- Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.
+
 * Mon May 21 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.58-2
 - Run restorecon /usr/bin/podman in postinstall
 
diff --git a/sources b/sources
index 480858b..9bfdad7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-d213769.tar.gz) = 94c3b6b097b9ad6b943bfec4b0d28d38a6fd10057b75c4236f03e52383361d1209d4c96acd02c2295707db037b26e5269eec5ead077bd90017518ea58fd5cc7a
+SHA512 (container-selinux-701557f.tar.gz) = 407baf6258b40241905ca682e1f0f7ad7109bd05bb92efad8c88defdf257b374353b6dacfac343d0a6e2347236d80e408edf320e95e5bf31e97b26e7829e876e