diff --git a/.gitignore b/.gitignore
index 6c408ed7..3ee2a614 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,6 @@ SOURCES/selinux-policy-contrib-c6da44c.tar.gz
 /container-selinux.tgz
 /selinux-policy-426c028.tar.gz
 /selinux-policy-contrib-c6da44c.tar.gz
+/selinux-policy-3806b3e.tar.gz
+/selinux-policy-contrib-8e0a2fa.tar.gz
+/macro-expander
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 0ee5c6bd..fd194ee9 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 426c028e3d055a6ae74f8bf7cc92107f3e43a5ea
+%global commit0 3806b3ec0401913d85f958aae6f7a4d8ce755348
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 c6da44cc670eb76341a756f7d338e60cfa7cd8ac
+%global commit1 8e0a2fa87968a00b7e57ca25a55da18ceeab4a44
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 117%{?dist}
+Release: 118%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -717,6 +717,20 @@ exit 0
 %endif
 
 %changelog
+* Thu Apr 13 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-118
+- Allow login_pgm setcap permission
+Resolves: rhbz#2172541
+- Label /run/fsck with fsadm_var_run_t
+Resolves: rhbz#2184348
+- Add boolean qemu-ga to run unconfined script
+Resolves: rhbz#2028762
+- Allow dovecot-deliver write to the main process runtime fifo files
+Resolves: rhbz#2170495
+- Allow certmonger dbus chat with the cron system domain
+Resolves: rhbz#2173289
+- Allow insights-client read all sysctls
+Resolves: rhbz#2177607
+
 * Thu Feb 16 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-117
 - Fix opencryptoki file names in /dev/shm
 Resolves: rhbz#2028637
diff --git a/sources b/sources
index a2fca67f..556a5109 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,4 @@
-SHA512 (container-selinux.tgz) = 9b3cd9824e1dd8aa5f10d195c12253b7b3e239cce10b34e94f1d72c37e6ad28b270f08f666f4adaa8133aced5598d1b0faf43f6901712dda2a1179e296828291
-SHA512 (selinux-policy-426c028.tar.gz) = 4618c8206c1043524def38b437401ab53a1c0ca01882e7f19fd4c13661f03476510ea541276e3c4eedb2c9e1ec16dfffe2c69e56dcfd3be35534cbe982dbec90
-SHA512 (selinux-policy-contrib-c6da44c.tar.gz) = 94f114e8915c2747e80e465f5f9e08eaa40807018f14c46779338b9176f2991b1ca31dd86f904018aabb5c7619d157a9d1a760158507fbd7abb34af95ebdb80f
+SHA512 (selinux-policy-3806b3e.tar.gz) = 2fb25a1fe91c14dd5c89beba7160defef2e098d141da06c230dbff3ebd7f3613f96c12b9a21a44c0877eef064d181774db7886549643ae60da182aebe4e67093
+SHA512 (selinux-policy-contrib-8e0a2fa.tar.gz) = faeb42df8a4d80a8cf2f91e571f789423fa87e404f860e921fe1bbed172beea744ddfafb2c355151f2c0cb55217c9aa85b24798301b4b691150adc37ad0fe346
+SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = d27c94c397886b86cfe9c7528907fedde73626f62bc8e26a91b4f68fcec4712a2e1a7f2e8d5e57fb93f0720395f688ed4ccf71d257181b97aa3df01fe2a8a8f8