diff --git a/changelog b/changelog
index 570ac245..9e51abc5 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,17 @@
+* Mon Feb 17 2025 Zdenek Pytela <zpytela@redhat.com> - 40.13.26-1
+- Rename winbind_rpcd_* types to samba_dcerpcd_*
+Resolves: RHEL-14759
+- Allow samba-dcerpcd work with ctdb cluster
+Resolves: RHEL-14759
+- Revert "Remove socket from unconfined_domain_type allow rule"
+Resolves: RHEL-77327
+- Dontaudit access of virt-related permissive domains
+Resolves: RHEL-77808
+- Add selinux_requires_min macro
+Resolves: RHEL-54715
+- Filter out EPEL related modules
+Resolves: RHEL-73505
+
 * Thu Feb 06 2025 Zdenek Pytela <zpytela@redhat.com> - 40.13.25-1
 - Update ktlshd policy to read /proc/keys and domain keyrings
 Resolves: RHEL-42672
diff --git a/selinux-policy.spec b/selinux-policy.spec
index f6d54185..e678f740 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 93ce705ccc0021a4b16df9d15b34b0f12edc0f1d
+%global commit 061ed78f650a71a7f47e9a9dcc20e0880e108346
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -17,7 +17,7 @@
 %define CHECKPOLICYVER 3.8
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 40.13.25
+Version: 40.13.26
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
diff --git a/sources b/sources
index c25fe466..cb3d4f02 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-93ce705.tar.gz) = 284644b2f7f2dc8127fe18c1457730ea17d4ef3e7c9182e896d6ba00561aeb09ac9bb1170e9f8ff12dd231dfd1f60d6d7964655665d0f6589588f5b82c1d661c
+SHA512 (selinux-policy-061ed78.tar.gz) = d22ff5253c9c8446cded5dba2f34f421fb9f7d9e3df187afa090a385ae14ffc580b38090da88fa36d6b249a0d9e5abf002c8d9cbe3af9045a174ba213ccdc6d9
+SHA512 (container-selinux.tgz) = 85ca0aa03fe4477351cb530da30e4ceb0990663ad1e3faf4a7d7c3377d7b871a25ba94b8388eb27a0802996a5b001913bbb153d0b0b154d06f24e1f0c5138b50
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 4246770978a80ac9d4e4047b0d36912a1338491c258a81f22837f59a738d506505ae1d29296e22518d88516b623ad2ce0f99ea32d0bc0566db5d028cad91afb9