diff --git a/.gitignore b/.gitignore
index 20ff007..cc777fe 100644
--- a/.gitignore
+++ b/.gitignore
@@ -31,3 +31,4 @@
 /container-selinux-d985665.tar.gz
 /container-selinux-8ba32a4.tar.gz
 /container-selinux-26c642a.tar.gz
+/container-selinux-96e58bf.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 03bea77..bf0ac61 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora} || 0%{?rhel} > 7
-%global commit0 26c642ae12820ff55697d6101f33d8b5b4274296
+%global commit0 96e58bf7fd152f24f6b95efc156d8cbb4446c354
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
 %global commit0 56c32da8a72f9e7af5daeaebac5b887830d123b1
@@ -35,7 +35,7 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos} || 0%{?rhel} > 7
 Epoch: 2
 %endif
-Version: 2.38
+Version: 2.39
 Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -117,6 +117,10 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Mon Jan 8 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.39-1
+- Allow container runtimes to use interited terminals.  This helps
+satisfy the bounds check of container_t versus container_runtime_t.
+
 * Sat Jan 6 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.38-1
 - Allow container runtimes to mmap container_file_t devices
 - Add labeling for rhel push plugin
diff --git a/sources b/sources
index 9afc32c..c291f4b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-26c642a.tar.gz) = ae172f6650b542a51963df4089687107363ec47727d8e5bacd8478df1aa2cb19c569801e7692b0e6a5b36d46efeffb0c3e3c9df76e678381265346ad79a0819e
+SHA512 (container-selinux-96e58bf.tar.gz) = d496b4ba8aa1c47b47dbed644b9d8a9e97e154814b878280929108609820aa30b00aa6dba37edc83568fcd8c82343b82fae642db6c18e2deddfaf499cc8276c5