diff --git a/selinux-policy.spec b/selinux-policy.spec
index a1b32c5b..9eaa7f2e 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 0a4e2f7fc34ab556b285d64c0979faa932868357
+%global commit fb7eee547c08be412b91350ad98c61318acba5df
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 40.13.7
+Version: 40.13.8
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -860,6 +860,19 @@ exit 0
 %endif
 
 %changelog
+* Tue Aug 13 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13.8-1
+- Add virt_create_log() and virt_write_log() interfaces
+Resolves: RHEL-47274
+- Update libvirt policy
+Resolves: RHEL-45464
+Resolves: RHEL-49763
+- Allow svirt_tcg_t map svirt_image_t files
+Resolves: RHEL-47274
+- Allow svirt_tcg_t read vm sysctls
+Resolves: RHEL-47274
+- Additional updates stalld policy for bpf usage
+Resolves: RHEL-50356
+
 * Thu Aug 08 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13.7-1
 - Add the swtpm.if interface file for interactions with other domains
 Resolves: RHEL-47274
diff --git a/sources b/sources
index 97b1f0e9..1203e87a 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-0a4e2f7.tar.gz) = 2a5d3ca2a3a389fee3d6232409aa387f915d9ffe53febc6964891388116f87b180eaf40cbd0d45fb1c5ca936d95b2f07b5d76975450b1f5b6e6df08fa71fd3c5
+SHA512 (selinux-policy-fb7eee5.tar.gz) = 7b739a3820897a0af95b3c149f4522bc21272bf44c4326916cac2cb8d7e4b42cf305ce5f27c9659e801c533d6d0ac2521c4a851e18f281ec97e2071bc75c8492
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 06f5710247c8c01997933cb4ef0c95b6e59f08b21f628b98bfae5b12ebea4c3580d41e52573dd12c84805866ae7a171c461b1e16d2a791ffc6c542b2e5281257
+SHA512 (container-selinux.tgz) = 1c455706491b45d561d6eafc4907c8a98e6b26ae6b548710987369fede5c073bae5834829abef3b5d203522f1afd066854e7207e6855b247fdcb9ac63b50d479