diff --git a/selinux-policy.spec b/selinux-policy.spec
index 18290c09..7b39ac63 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit adbd84f1ed395ed834bb06b76342f871a2708820
+%global commit 63139ec7465672c3e151fc8e4648f1079d11aa2f
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 34.1.10
+Version: 34.1.11
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -792,6 +792,18 @@ exit 0
 %endif
 
 %changelog
+* Thu Jul 29 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.11-1
+- Allow hostapd bind UDP sockets to the dhcpd port
+Resolves: rhbz#1979968
+- Allow mdadm read iscsi pid files
+Resolves: rhbz#1976073
+- Unconfined domains should not be confined
+Resolves: rhbz#1977986
+- Allow NetworkManager_t to watch /etc
+Resolves: rhbz#1980000
+- Allow using opencryptoki for ipsec
+Resolves: rhbz#1977915
+
 * Wed Jul 14 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.10-1
 - Allow bacula get attributes of cgroup filesystems
 Resolves: rhbz#1976917
diff --git a/sources b/sources
index 00798bee..90a9925a 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-adbd84f.tar.gz) = 926eb45e92565c3d584c822434c28a75435f24e8a9cc8171435a318976616695878538e642382a203bb2f953ea49377782a6269c8e0ffd9ca8af44d81d3743fe
-SHA512 (container-selinux.tgz) = af1df199aebc2acd2cdb1cc30519c24644b4872900110278352c0bea4528ec59c2e149b861d2dd90e3996eae68d88708c427ff1cde9709a7be1265c33e378fff
+SHA512 (selinux-policy-63139ec.tar.gz) = 379497f621d6bdefb116476e460691d9bf3918625b856e94ed92193c9725790ee8b5a43d25a58d3dbd2fcc84ae37469a3143bb203f07c0e8df8c8c74138db6f1
+SHA512 (container-selinux.tgz) = e4562e9fff0839fd7aaebdebd4b95b4b927af8039ec7050eee65119d6dba1232a7f195dbb6c6356d2ddd22aa2062132e5c70f83df93ccaf8bf6cf2e8e8306dcc
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4