diff --git a/selinux-policy.spec b/selinux-policy.spec
index 8d8675a7..ca1a6d81 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit f81c762b515ed1263ff63766afada4f590642dad
+%global commit 380039753ea9a0dd02edd59efbab6b3568626cf6
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.38
+Version: 38.1.39
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -809,6 +809,20 @@ exit 0
 %endif
 
 %changelog
+* Thu Jun 06 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.39-1
+- Add interfaces for watching and reading ifconfig_var_run_t
+Resolves: RHEL-39408
+- Allow dhcpcd use unix_stream_socket
+Resolves: RHEL-39408
+- Allow dhcpc read /run/netns files
+Resolves: RHEL-39408
+- Allow all domains read and write z90crypt device
+Resolves: RHEL-38833
+- Allow bootupd search efivarfs dirs
+Resolves: RHEL-36289
+- Move unconfined_domain(sap_unconfined_t) to an optional block
+Resolves: RHEL-37663
+
 * Thu May 16 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.38-1
 - Add boolean qemu-ga to run unconfined script
 Resolves: RHEL-31211
diff --git a/sources b/sources
index b1dda740..c57438bd 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-f81c762.tar.gz) = ccecdd46657eb6265c6dec2121dd7b7efbd6305eca34061a4bee000bebaa9bab67973640784099b916549670b424610c035a43663a8de963e68d652460baad88
+SHA512 (selinux-policy-3800397.tar.gz) = 1fc4d9a3d8a92407fd4b4604d2010fada538c584da852c4250e20ddcc9a46d57e3151fee44ffcfd1649b96bbe702286b24ad29fb2de17057a2ab9b3c6097a5dc
+SHA512 (container-selinux.tgz) = dd74520ff5415bab4d6b6ceec9a52d303b3a82ca4b48a729db2fa96f1efaec2fb3c46a2d32eeb5d305aa1b7e6fefe76c9587877783d9c68cb319420a83f9cb70
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 14935d491769b0408a2037c7760b51ca0fbb6949b50484d77468454b9d320984fe5d79b8e70b4236aca23bc363bdde46819e20f25b17f6a9418814da610515d9