diff --git a/changelog b/changelog
index e86bddb4..71f79f8f 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,23 @@
+* Thu Jan 16 2025 Zdenek Pytela <zpytela@redhat.com> - 40.13.22-1
+- Allow staff user dbus chat with virt-dbus
+Resolves: RHEL-73914
+- Allow virtqemud domain transition to nbdkit
+Resolves: RHEL-69118
+- Add nbdkit interfaces defined conditionally
+Resolves: RHEL-69118
+- Allow svirt_t read sysfs files
+Resolves: RHEL-71270
+- Label /dev/pmem[0-9]+ with fixed_disk_device_t
+Resolves: RHEL-71656
+- Add support for the KVM guest memfd anon inodes
+Resolves: RHEL-69128
+- Allow sysadm user dbus chat with virt-dbus
+Resolves: RHEL-73914
+- Allow initrc_t transition to passwd_t
+Resolves: RHEL-71665
+- Allow unconfined_service_t transition to passwd_t
+Resolves: RHEL-71665
+
 * Wed Jan 08 2025 Zdenek Pytela <zpytela@redhat.com> - 40.13.21-1
 - Allow init create vsock socket for sshd
 Resolves: RHEL-72549
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 83d77cad..701d9311 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 9e20ff3dfd8b57bab412414b748ef1bac237b73b
+%global commit 526a180591de075f64e778a26cdb3e07766d9319
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -17,7 +17,7 @@
 %define CHECKPOLICYVER 3.8
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 40.13.21
+Version: 40.13.22
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
diff --git a/sources b/sources
index ffc5e65f..3bb7bbee 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-9e20ff3.tar.gz) = 53ce5243472ee22aea0fdca36019035ed5c93b4ccf97f7ce5cb12faf2ff1ede575f72b09d328131c58c2875e69c6ae2943e239061be96a65f62789f536afcd74
+SHA512 (selinux-policy-526a180.tar.gz) = 7c49870d04d79b5f1c8d64c3edbcd590b6ee4a3aaa5761f93804041745a7eb8f5d9cad10e37a36d5568940107f07e83bce9bf5ef7b43910016434caf0d25c6c8
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 2c214386e2f382d7b237f81b1ccdcbbfb111115868f9e9219a454984233907138df69e52b82ebbbce3c2209c4d5e56e558d8790a8e8a2744203bd13c7ec69001
+SHA512 (container-selinux.tgz) = a0d9025ee2e4500388de36abf8f635d820179f56d7d47720097c6b73fe876b06f64c200ab16f7b3b02c5002ea63646d15326ea04263c0e5c2b0a5c2120284ffd