diff --git a/.gitignore b/.gitignore
index 93a2e897..24fafabd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -29,3 +29,5 @@
 /selinux-policy-contrib-58ad0c6.tar.gz
 /selinux-policy-5518ff0.tar.gz
 /selinux-policy-contrib-2877823.tar.gz
+/selinux-policy-426c028.tar.gz
+/selinux-policy-contrib-c6da44c.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 0e1284b1..0ee5c6bd 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 5518ff0abd88777d0a28600d4f6e89489a3c2905
+%global commit0 426c028e3d055a6ae74f8bf7cc92107f3e43a5ea
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 28778236d14c26540b43d2b446221cb0c2c9eac0
+%global commit1 c6da44cc670eb76341a756f7d338e60cfa7cd8ac
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 115%{?dist}
+Release: 117%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -717,6 +717,27 @@ exit 0
 %endif
 
 %changelog
+* Thu Feb 16 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-117
+- Fix opencryptoki file names in /dev/shm
+Resolves: rhbz#2028637
+- Allow system_cronjob_t transition to rpm_script_t
+Resolves: rhbz#2154242
+- Revert "Allow system_cronjob_t domtrans to rpm_script_t"
+Resolves: rhbz#2154242
+- Allow httpd work with tokens in /dev/shm
+Resolves: rhbz#2028637
+- Allow keepalived to set resource limits
+Resolves: rhbz#2168638
+- Allow insights-client manage fsadm pid files
+
+* Thu Feb 09 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-116
+- Allow sysadm_t run initrc_t script and sysadm_r role access
+Resolves: rhbz#2039662
+- Allow insights-client manage fsadm pid files
+Resolves: rhbz#2166802
+- Add journalctl the sys_resource capability
+Resolves: rhbz#2136189
+
 * Thu Jan 26 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-115
 - Fix syntax problem in redis.te
 Resolves: rhbz#2112228
diff --git a/sources b/sources
index 72925f0f..a2fca67f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (container-selinux.tgz) = ad9dc3b8ce0f40dc431ea8bfde1d2db7a17845987324d3664545a5e82106288dab4b1ae8132c2a59ab7ec8be1693bcd9520b739077ed421d3096a40677cd31c8
-SHA512 (selinux-policy-5518ff0.tar.gz) = d5654379d8c4d65257343e701de9bb22b7cfa5bd58ede4f8b0bebc3a5339ced0a8152a213668c31790f75bd3a1a2a6ebcb6747b52e169fa8ba552c35c1312649
-SHA512 (selinux-policy-contrib-2877823.tar.gz) = fe41c4a0091072e9ff0e03cd9ced2a9229365fc819e553452d2d19d15c192c2f37bf9cce28806d7e25bd959dd30c8bdcad045573086482af841ca7c6056ba176
+SHA512 (container-selinux.tgz) = 9b3cd9824e1dd8aa5f10d195c12253b7b3e239cce10b34e94f1d72c37e6ad28b270f08f666f4adaa8133aced5598d1b0faf43f6901712dda2a1179e296828291
+SHA512 (selinux-policy-426c028.tar.gz) = 4618c8206c1043524def38b437401ab53a1c0ca01882e7f19fd4c13661f03476510ea541276e3c4eedb2c9e1ec16dfffe2c69e56dcfd3be35534cbe982dbec90
+SHA512 (selinux-policy-contrib-c6da44c.tar.gz) = 94f114e8915c2747e80e465f5f9e08eaa40807018f14c46779338b9176f2991b1ca31dd86f904018aabb5c7619d157a9d1a760158507fbd7abb34af95ebdb80f