diff --git a/crypto-policies.spec b/crypto-policies.spec
index 39c9f3c..0568dc6 100644
--- a/crypto-policies.spec
+++ b/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20231016
-%global git_commit 77ceb0bb0eb3fa0e97865d489b82175bdbce413b
+%global git_date 20231108
+%global git_commit 994ae09bd74fbaf9b5ff4b029c66250d5aa406f7
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -238,6 +238,11 @@ end
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
+* Wed Nov 08 2023 Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
+- turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
+- fips-mode-setup: increase chroot-friendliness (RHEL-11350)
+- fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)
+
 * Mon Oct 16 2023 Alexander Sosedkin <asosedkin@redhat.com> - 20231016-1.git77ceb0b
 - openssl: fix SHA1 and NO-ENFORCE-EMS interaction
 - bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx
diff --git a/sources b/sources
index 42d4a39..f764259 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crypto-policies-git77ceb0b.tar.gz) = d422cd8e4ddc56618c04498060cb2fcf0c624e5bba10cdd349e54f5106e246d287a763764246787ae17aaea359854767eb12df425f51f141b86d35e2a7a95aea
+SHA512 (crypto-policies-git994ae09.tar.gz) = cab7e2def7a437cdbd99267b2efd92f67b464638a2039fb31de235e3e5c0c5a05e06c41f4b3159f09b0fc12162973eab4f748cd7a22cb58941f1409c72026646