diff --git a/.gitignore b/.gitignore
index 14c6e0d2..887144cd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,3 +23,5 @@
 /selinux-policy-f69f5fb.tar.gz
 /selinux-policy-b04459e.tar.gz
 /selinux-policy-contrib-4905735.tar.gz
+/selinux-policy-1aa8a0e.tar.gz
+/selinux-policy-contrib-4edd823.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 24a430c8..577629b0 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 b04459ea53bcc11159ed41f5a71c624da129b7b6
+%global commit0 1aa8a0e438335c2a5a26350c2dcb180447985f3f
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 4905735f7b6c3afe79fb9bf52e81cec3bc67bc6a
+%global commit1 4edd823afd43e6e576de2a9f738e686ab485dcc8
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 112%{?dist}
+Release: 113%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -717,6 +717,30 @@ exit 0
 %endif
 
 %changelog
+* Thu Dec 15 2022 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-113
+- Allow systemd-socket-proxyd get attributes of cgroup filesystems
+Resolves: rhbz#2088441
+- Allow systemd-socket-proxyd get filesystems attributes
+Resolves: rhbz#2088441
+- Allow sysadm read ipmi devices
+Resolves: rhbz#2148561
+- Allow system mail service read inherited certmonger runtime files
+Resolves: rhbz#2143337
+- Add lpr_roles  to system_r roles
+Resolves: rhbz#2151111
+- Allow insights-client tcp connect to various ports
+Resolves: rhbz#2151111
+- Allow insights-client work with pcp and manage user config files
+Resolves: rhbz#2151111
+- Allow insights-client dbus chat with various services
+Resolves: rhbz#2152867
+- Allow insights-client dbus chat with abrt
+Resolves: rhbz#2152867
+- Allow redis get user names
+Resolves: rhbz#2112228
+- Add winbind-rpcd to samba_enable_home_dirs boolean
+Resolves: rhbz#2143696
+
 * Wed Nov 30 2022 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-112
 - Allow ipsec_t only read tpm devices
 Resolves: rhbz#2147380
diff --git a/sources b/sources
index 605789eb..ad4f8bbb 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (container-selinux.tgz) = 1b5df974c40ffbb7503773694fa442dd710ca6b176efbb7c18f1b346f219d179ef31eb1bc758f34a324b947d4ab4db92cd8506b115b3e3db53e7a86f73497585
-SHA512 (selinux-policy-b04459e.tar.gz) = 7559a42d7e7a42c1263a7096c6635dac4d5495397676897309ed2d313dde11d2ad37aaa4e25fdde5cd7b35157be32764a615c354dc7355b0b8ff93e48b484ea6
-SHA512 (selinux-policy-contrib-4905735.tar.gz) = f8e40c812d1a1de5123c6ed1d485fa8b316622b04c65b7030664b08232231eb7372ed7a3ad2aad49b8a8d73a2c651a660ea495722374d0eabfd6ec159ac41ea8
+SHA512 (container-selinux.tgz) = cf971b52a085bf2d0862da66e88e1f867bc84c1a43827c073d281c9d3fdef09a0d28207bc931bf95f346daca162862a0b08e028b0d043ee003cda54c7074fed8
+SHA512 (selinux-policy-1aa8a0e.tar.gz) = 598944b1a8d9c12b241caf7129cd5896ab82299dce170296ba9e4aa11c6e705fc15637f555a25b6a3f69f3579ed765c8e9ff428380dbad66e989f56d2f177374
+SHA512 (selinux-policy-contrib-4edd823.tar.gz) = 991444c41247da4e1b8e7bd2e179b4b1607ec350a546b1913ca490546ec03114968e8c44fb67e099f03640c8bf3e64f2c0dc95f62389f024e797469d24890fea