diff --git a/selinux-policy.spec b/selinux-policy.spec
index d9991a4a..59d2982f 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 427ac6d895a8ae105c62901850916c57f830832f
+%global commit c0f6c3be2b0059221dfc086ceb0632ad726fa34d
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 37.13
+Version: 37.14
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -816,6 +816,30 @@ exit 0
 %endif
 
 %changelog
+* Mon Oct 31 2022 Zdenek Pytela <zpytela@redhat.com> - 37.14-1
+- Allow rotatelogs read httpd_log_t symlinks
+- Add winbind-rpcd to samba_enable_home_dirs boolean
+- Allow system cronjobs dbus chat with setroubleshoot
+- Allow setroubleshootd read device sysctls
+- Allow virt_domain read device sysctls
+- Allow rhcd compute selinux access vector
+- Allow insights-client manage samba var dirs
+- Label ports 10161-10162 tcp/udp with snmp
+- Allow aide to connect to systemd_machined with a unix socket.
+- Allow samba-dcerpcd use NSCD services over a unix stream socket
+- Allow vlock search the contents of the /dev/pts directory
+- Allow insights-client send null signal to rpm and system cronjob
+- Label port 15354/tcp and 15354/udp with opendnssec
+- Allow ftpd map ftpd_var_run files
+- Allow targetclid to manage tmp files
+- Allow insights-client connect to postgresql with a unix socket
+- Allow insights-client domtrans on unix_chkpwd execution
+- Add file context entries for insights-client and rhc
+- Allow pulseaudio create gnome content (~/.config)
+- Allow login_userdomain dbus chat with rhsmcertd
+- Allow sbd the sys_ptrace capability
+- Allow ptp4l_t name_bind ptp_event_port_t
+
 * Mon Oct 03 2022 Zdenek Pytela <zpytela@redhat.com> - 37.13-1
 - Remove the ipa module
 - Allow sss daemons read/write unnamed pipes of cloud-init
diff --git a/sources b/sources
index 44f4bc2b..66ef779f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-427ac6d.tar.gz) = 3d22b33eefc0375e4d58760475d6b1b84df5e844686c2307506a75c05cb24eb3751827fd7e9f12853c164320c5ebd32ffcbc2763a0b9bcc72dc34300efc05cbf
-SHA512 (container-selinux.tgz) = 977b1debfc0bc7336f41fc328a3aacdd1b707f46f1392de60ccb94a5041b5a2906413191723a13f9cb9f7eb8f742be7ab05fdf3edac8607bbb5fc090b394e6e9
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = cb79b7d59e67efc94165023b826df2f18ee0e2ed6e8d39831f79188f954f810d952d3aae128172377cfdc7bb775bb96e8756d828bbb314cbd49d600b1aaed8d1
+SHA512 (selinux-policy-c0f6c3b.tar.gz) = b72b31a14232ee2b5c58475437384532b4da89cdaf3e3a01977b5e145aad81d8ebbd7396112776593b2ba9e94e85b66cee053782a3a75ccbb2b2d1a336a8117c