diff --git a/.gitignore b/.gitignore
index 9a03436b..fef93fc6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -424,3 +424,5 @@ serefpolicy*
 /selinux-policy-a9839a5.tar.gz
 /selinux-policy-contrib-35568c7.tar.gz
 /selinux-policy-90b3284.tar.gz
+/selinux-policy-contrib-46d44de.tar.gz
+/selinux-policy-ae2c4ae.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 83e81992..e6059211 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 90b328406aea1168714563924a291d4673be58c0
+%global commit0 ae2c4ae2e50de03ec62b6457902b3a572e86529a
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 35568c715194d6f4f408996f0060b6b554147ddf
+%global commit1 46d44de3590ea9fcb0f227ea577c7ebf445eddfd
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.5
-Release: 17%{?dist}
+Release: 18%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -787,6 +787,12 @@ exit 0
 %endif
 
 %changelog
+* Thu Nov 28 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-18
+- Introduce new type pdns_var_lib_t
+- Allow zebra_t domain to read files labled as nsfs_t.
+- Allow systemd to setattr on all device_nodes
+- Allow systemd to mounton and list all proc types
+
 * Wed Nov 27 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.5-17
 - Fix nonexisting types in rtas_errd_rw_lock interface
 - Allow snmpd_t domain to trace processes in user namespace
diff --git a/sources b/sources
index 0c6d3949..c67c38ff 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (selinux-policy-contrib-35568c7.tar.gz) = 979ea145ba88f38910735a7a7d8625878adf76c5736d125348fc5ff3b85b86d9adaf2a3ac227381ef073e69b66ccb92a22bf105d3e8fd48e3c993ac5aa86f1c8
-SHA512 (selinux-policy-90b3284.tar.gz) = 44bd6ca31e082104a7a158fd3d4e19b3e97351a371f22e29d72f8be623edb511192e5aaf1c355e90e0cd8e5a548de0e86028ede170b60b6dc52a48afcc9955a3
-SHA512 (container-selinux.tgz) = b02cdc3ff37eec2925c4df1d9f8ec285ce175a906646128069440a1f9add956742ff3f3fff7479fdb22867073cf9b017c959920d29500b2c0f6375b5855c772e
+SHA512 (selinux-policy-contrib-46d44de.tar.gz) = ba119d77e63cf069deaef68ddd83db4ad07ea9c5c2d7a66bebab6dfbcebe8b6d7cface3c92a6e9353026a14284d6741d72938ec97d9ee78375bdbb9d24c09d87
+SHA512 (selinux-policy-ae2c4ae.tar.gz) = 1ec36a40da25cd13eb27c9cad78d3adb3ab806c54b9938da979ad74d4b1280cd9de1acb6619dd69c4b0210672898e843fae40a2da397da278fd973a2fafdb000
+SHA512 (container-selinux.tgz) = 48fbd22854fe9601a05a80117f5660587549fe821c251b2c35e647493975230aa2ba63ae6c8052d9b522434f6a3b87b325b3356dd509b2dfc5b9afb84b6814ac
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4