diff --git a/selinux-policy.spec b/selinux-policy.spec
index bd4dcc7..a6170d0 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 8e37504d1c611f9ab6ba12767dbad2fd8eaac343
+%global commit a7118057164c6e19e5cab2a48c0c495af259846c
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.12
+Version: 38.1.13
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -809,6 +809,22 @@ exit 0
 %endif
 
 %changelog
+* Thu May 18 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.13-1
+- Allow insights-client work with teamdctl
+Resolves: rhbz#2190178
+- Allow virsh name_connect virt_port_t
+Resolves: rhzb#2187290
+- Allow cupsd to create samba_var_t files
+Resolves: rhbz#2174445
+- Allow dovecot to map files in /var/spool/dovecot
+Resolves: rhbz#2165863
+- Add tunable to allow squid bind snmp port
+Resolves: rhbz#2151378
+- Allow rhsmcert request the kernel to load a module
+Resolves: rhbz#2203359
+- Allow snmpd read raw disk data
+Resolves: rhbz#2196528
+
 * Fri Apr 14 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.12-1
 - Allow cloud-init domain transition to insights-client domain
 Resolves: rhbz#2162663
diff --git a/sources b/sources
index bfb642b..e4722d2 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-8e37504.tar.gz) = 0c0b39f2421ca964db7b9cbbabf00000c37b1c7110bcac47eb489ca0d8e49ecca0d6cb5587e7e8897deaa941a27a6abb371e0ae75a066f105d76d9801b52ef4e
-SHA512 (container-selinux.tgz) = 994717d9350b71ab5cabc6cf08b11eec1832a7db0e6c5a78d0e36cb32f78438d84a1d0cda431d5a80e67fc1e8645f663eca65f30e023d6aca8697770556ba8b2
+SHA512 (selinux-policy-a711805.tar.gz) = 2bb763ce633e888c695e2fa5c41054227903779463d672122b79c2c38faaddf3a984e99e22f7d022fb48791102ff3d4bb7a1e958d98230fba4dde5dde53d026f
+SHA512 (container-selinux.tgz) = 60fbaba6dee06bed01882fb15caad3ffa6a462dbe5b151136dd249927bf1c0e5eff3cb8fba866ba0c554ff322f0f76e2046f0ad2ef199fd0504f66b6471243c2
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4