diff --git a/selinux-policy.spec b/selinux-policy.spec
index e7488bf..4f952fd 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit f7e01621a353e1deff1aa54c027ef446188fb92e
+%global commit 94cf6f6d51ad0340d88b480d9425b3af0585d2a6
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.18
+Version: 38.1.19
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -809,6 +809,22 @@ exit 0
 %endif
 
 %changelog
+* Thu Aug 03 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.19-1
+- Allow qatlib to read sssd public files
+Resolves: rhbz#2080443
+- Fix location for /run/nsd
+Resolves: rhbz#2181600
+- Allow samba-rpcd work with passwords
+Resolves: rhbz#2107092
+- Allow rpcd_lsad setcap and use generic ptys
+Resolves: rhbz#2107092
+- Allow gpsd,oddjob,oddjob_mkhomedir rw user domain pty
+Resolves: rhbz#2223305
+- Allow keepalived to manage its tmp files
+Resolves: rhbz#2179212
+- Allow nscd watch system db dirs
+Resolves: rhbz#2152124
+
 * Fri Jul 21 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.18-1
 - Boolean: Allow virt_qemu_ga create ssh directory
 Resolves: rhbz#2181402
diff --git a/sources b/sources
index 72d5cbe..50ec68b 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-f7e0162.tar.gz) = 9251694ecd1c2fcbcf33d5c82a6c87ac96fd5cdf1fe04b305ebbf0114beeaa34d1647079e39972c1787daee9904c94b5cd0e0d0d7853267bf9441a853de627bc
-SHA512 (container-selinux.tgz) = cb09801e708bc1b520be0a599eb4122b813d355c09d76f0db7b8ab0fab3b422badc63057ab095ebacb582c6e8c183f88fe62a0114431ac82b03cdcec67cf4f4d
+SHA512 (selinux-policy-94cf6f6.tar.gz) = 1ccdff5b892aa533f01c45acd2773390f16f9c1a651ff484234ca396b6bfb91eadea806420fa5a9cda5941aac5b9bbdc6dc4ac43ebc3cb8bb11fb63ed5ee9f7d
+SHA512 (container-selinux.tgz) = 0db53b721c6f62e8dd012ad7a1768694e2dade67e1e18936de8febca47e7589bc0962078eb358e2c690c7c6aba88dd58099320e39b8e484a7d754daa06f1abed
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4