diff --git a/changelog b/changelog
index 86b55ede..99edbfff 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,29 @@
+* Mon Jul 27 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.26-1
+- Add missing rule for automotive policy
+Resolves: RHEL-216823
+- Allow aide get attributes of all filesystems
+Resolves: RHEL-182423
+- Allow postfix_postdrop_t/system_mail_t append to init unix domain stream sockets
+Resolves: RHEL-169587
+- Dontaudit unconfined_t map its private directories
+Resolves: RHEL-154554
+- Allow dhcpcd hook scripts read generic files in /proc
+Resolves: RHEL-153117
+- Allow dhcpc_hook_t connect to init_t over a unix stream socket
+Resolves: RHEL-147153
+- Allow dhcpc_hook_t unix_dgram_socket and module_request
+Resolves: RHEL-147153
+- Allow sysadm_t run and read/write networkmanager bpf programs
+Resolves: RHEL-145714
+- Allow nfsidmapd read virt lib files
+Resolves: RHEL-132866
+- Support cronie create crontab backups
+Resolves: RHEL-129528
+- Allow unconfined_t mounton its lnk_files
+Resolves: RHEL-127120
+- Allow systemd-machined to manage nspawn runtime directory
+Resolves: RHEL-105966
+
 * Sat Jul 04 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.25-1
 - Allow kernel write to unconfined and sysadm users' keys
 Resolves: RHEL-156860
diff --git a/selinux-policy.spec b/selinux-policy.spec
index cc0647a1..6dc15039 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -6,7 +6,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit f02af002e5294ab0ea2e344cab21c32eab52c304
+%global commit f19e526752937e4418adfd5c9b3b762a8d8b5e98
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -20,7 +20,7 @@
 %define STABLEVER 42.1.18
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 42.1.25
+Version: 42.1.26
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
diff --git a/sources b/sources
index a0920412..8fe29eb5 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-f02af00.tar.gz) = dab53f9212e3454ea2139c4d9720084d8ed743e95101a9c80cc4d9be6c0501a5e125f7f3a68bb34ae759796cd98a5750a575e0a370ef317532c83027480a3192
+SHA512 (selinux-policy-f19e526.tar.gz) = a3247165104dc2389f9e738a8bb75d1baf022cc419103368d2211b3b272309b6c781ef523daba23e779697cb96f7707bf39acff516c09670fa729b37ea5a7334
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 513f6d6c0fa5b95d3a96309bbbe8ac8fdb8bc1c428776e675daba2d67d5a71a29a5eb66e39421e6c8b146b9e603ca881728b95eda85b63c1ee28d1114e2cab2b
+SHA512 (container-selinux.tgz) = f9b7ac38dd20bdfdec0b2069e77ce5bc97c904ff2fbe6ae83fc296d559e23944da4946f10e6f50fe8aaa0c4dc15b04d7774b74746718180741f816b719d9c175