diff --git a/selinux-policy.spec b/selinux-policy.spec
index 0af7140..772cea9 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 072a364c1721a4daade3bc78480e6260ae011849
+%global commit 59786aad6bf769c90bcf71b669f3eb3e58c72ea7
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.21
+Version: 38.1.22
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -809,6 +809,18 @@ exit 0
 %endif
 
 %changelog
+* Thu Aug 24 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.22-1
+- Allow qatlib  to modify hardware state information.
+Resolves: rhbz#2080443
+- Update policy for fdo
+Resolves: rhbz#2229722
+- Allow gpsd, oddjob and oddjob_mkhomedir_t write user_tty_device_t chr_file
+Resolves: rhbz#2223305
+- Allow svirt to rw /dev/udmabuf
+Resolves: rhbz#2223727
+- Allow keepalived watch var_run dirs
+Resolves: rhbz#2186759
+
 * Thu Aug 17 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.21-1
 - Allow logrotate_t to map generic files in /etc
 Resolves: rhbz#2231257
diff --git a/sources b/sources
index 28d7926..b727d2b 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-072a364.tar.gz) = 32d27f6c7e9d859477d5eef18e128664eb2016552f7bd13dcb01527710b61c0411b3c6d885feefd03bb1503e98c5e92de5fa84ad662cf0bd5147311c5dfd6c27
-SHA512 (container-selinux.tgz) = f853e82906f43a5af133d35c64eb2419848f92f806f1f21e2ff01f784b4601cb5e8ccbff258e50bab31cf9b628389c54760d6cc38c521e2843e9b7e32dd0ac4c
+SHA512 (selinux-policy-59786aa.tar.gz) = 334072732d7a90e8f71379ae0f9894540dde183febe4daa0f18d11fb0fca99c96f2adbb8eadb28506e271abf1fe36148683995191b7fc6e34e8808d16b2a980b
+SHA512 (container-selinux.tgz) = 20cd3797447c69874b3cbb1b60df528cd6fe794775be2614b55ed0f6dc90623856ab884d1a0bd2323cfda72ddf5304a5fd75b418faad8c577d9d2eb80832fc90
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4