diff --git a/.gitignore b/.gitignore
index 017b8c18..c20a1457 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,3 +14,4 @@ SOURCES/selinux-policy-contrib-c6da44c.tar.gz
 /selinux-policy-7bf027b.tar.gz
 /selinux-policy-contrib-15580d9.tar.gz
 /selinux-policy-contrib-00f671d.tar.gz
+/selinux-policy-contrib-595dfde.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index fff32859..62006598 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 00f671d275ee3884c17de0998e417fb26ad075e7
+%global commit1 595dfdeeb39115f7d68511cc5012b0f6896a3548
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 122%{?dist}
+Release: 123%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -717,6 +717,14 @@ exit 0
 %endif
 
 %changelog
+* Thu Jun 29 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-123
+- Label only /usr/sbin/ripd and ripngd with zebra_exec_t
+Resolves: rhbz#2213606
+- Allow httpd tcp connect to redis port conditionally
+Resolves: rhbz#2213965
+- Exclude container-selinux manpage from selinux-policy-doc
+Resolves: rhbz#2218362
+
 * Thu Jun 15 2023 Nikola Knazekova <nknazeko@redhat.com> - 3.14.3-122
 - Update cyrus_stream_connect() to use sockets in /run
 Resolves: rhbz#2165752
diff --git a/sources b/sources
index b8bec6e9..231d42d7 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (selinux-policy-7bf027b.tar.gz) = b900b92cb478c8760066a92b940c3a7805b9e027f45b3f95db11c0f21e4bcc53b9aa2789c8ef27419bebc88e1241f83b754bf86df6d7080ed8d6177d8220dd99
-SHA512 (selinux-policy-contrib-00f671d.tar.gz) = 0a5543614c10d8b7bd5b4ecb43162509585516c2ed3e3430e01c73003b72a7925bd9ed384ea0b21a410f0527ab79f2c6abbd6929b3984e651664a09310747c33
-SHA512 (container-selinux.tgz) = a3c840a9640ed6856d745b324c5e8bce51bdb6930582e3cdd42ccec3a0344c6b9cd9f69862ce8117c6d1c765f4bc3dfbd01a86b0c877ce833b3303d7c51d15a3
+SHA512 (selinux-policy-contrib-595dfde.tar.gz) = 3f5575e209652243b0e2e4f7962132a9d076923ecf777581143f1794ddf72b69fdf7781aad0acb64b22b015aa3d45034e0e345bd10263e80e09e6ca8d6281d02
+SHA512 (container-selinux.tgz) = 33e8ff2478a5024df1cb227b1eb4b9b95c616cd81957ab968a082619f05ea149d63bce5b5ae3b4d2de5ead6d6371d49ef00c4ae7a8048e435342b9c8bca549ce
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4