diff --git a/.gitignore b/.gitignore
index 1340c20b..cf453b11 100644
--- a/.gitignore
+++ b/.gitignore
@@ -24,3 +24,5 @@ SOURCES/selinux-policy-contrib-c6da44c.tar.gz
 /selinux-policy-ff2ac01.tar.gz
 /selinux-policy-b5586ba.tar.gz
 /selinux-policy-contrib-267743a.tar.gz
+/selinux-policy-contrib-ec63def.tar.gz
+/selinux-policy-8974fee.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 7619502f..b2801efd 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 01c6e6f2a08f7bb1f5810d4a556b9b4e6fbfdc8d
+%global commit0 8974fee2ded69ffebb9a4df42332643a9419cb6d
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 ff427a9ccf10c7d1865974008892012359aeb40c
+%global commit1 ec63def9e799bc3dd4a052f75b24d867bde7b57a
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 129%{?dist}
+Release: 130%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -718,6 +718,14 @@ exit 0
 %endif
 
 %changelog
+* Wed Oct 04 2023 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-130
+- Label msmtp and msmtpd with sendmail_exec_t
+Resolves: RHEL-1678
+- Set default file context of HOME_DIR/tmp/.* to <<none>>
+Resolves: RHEL-1099
+- Improve default file context(None) of /var/lib/authselect/backups
+Resolves: RHEL-3539
+
 * Fri Sep 29 2023 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-129
 - Set default file context of /var/lib/authselect/backups to <<none>>
 Resolves: RHEL-3539
diff --git a/sources b/sources
index c8599225..c745b431 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (selinux-policy-01c6e6f.tar.gz) = b81f4f699c7c4fca4c7cee671f7845c82b63d9c1d59e56972ddae99e0d3710fc78fb81c57cf2548c9ee97cc2b9dc64ddf5bfd5448bc60940dd8768ae5c94f770
-SHA512 (selinux-policy-contrib-ff427a9.tar.gz) = 58074699161928fbf26bf1e3da84b21a1c2bfc294632a646a40c1b6851afccff3716a7517d821778bbe05e6513d8c1b8402e7c1dbea6cc6fe01b0914d0c38a7c
-SHA512 (container-selinux.tgz) = 79ca6d5d173742a8f2f341210e5466a8153f199015dd43300f67874296be3f8146d4688f9e9c971cdcb4c7ad4145dfa071da1c46f1529d4d2d36062b77604b81
+SHA512 (selinux-policy-contrib-ec63def.tar.gz) = e4e0a80022493f6665429fa7502c8dbeb4b97423fa94331766da691a1183f03fda5599ecd2d125e627bb0c422b2e3f9d825852eda54c1c5dbe2e367ba1802f45
+SHA512 (selinux-policy-8974fee.tar.gz) = 104bb815985c474b2debe33f4bbc964ffe28509a7158b86f8b0303a4126d15e4264a0ea6444947c3f96c942f098b6234c8057d9ebd08bb686feb42c280a70b38
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = 61eaf7ad8d0ed7762eaf91b43cf851003c1033f87eab76a2e44a9bdfd7f400587709475333446bdb66130f75530c3b9b900d95be83a4fde1dc2738995549e39c