diff --git a/selinux-policy.spec b/selinux-policy.spec
index 84ee2dc8..24313875 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 7601b6da8c814c637e06f3485e982d95a83e07f1
+%global commit cd4eedd465977f93fca99ca00e03881862640881
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.5
+Version: 38.1.6
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -808,6 +808,18 @@ exit 0
 %endif
 
 %changelog
+* Thu Feb 09 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.6-1
+- Allow modemmanager create hardware state information files
+Resolves: rhbz#2149560
+- Dontaudit ftpd the execmem permission
+Resolves: rhbz#2164434
+- Allow nm-dispatcher plugins read generic files in /proc
+Resolves: rhbz#2164845
+- Label systemd-journald feature LogNamespace
+Resolves: rhbz#2124797
+- Boolean: allow qemu-ga read ssh home directory
+Resolves: rhbz#1917024
+
 * Thu Jan 26 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.5-1
 - Reuse tmpfs_t also for the ramfs filesystem
 Resolves: rhbz#2160391
diff --git a/sources b/sources
index ff1124de..8d689bf3 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-7601b6d.tar.gz) = 875c7ed5eb0fb14120f36d53286977e5fd8325cfdde9e4781abad47ed4785123ec85ee8b4f25a5a271d983c0842b9bf2cc088550c8baa78777eefb7c7064a90c
-SHA512 (container-selinux.tgz) = fc6b51dd22a6e7726abb448e76f69c48941d0efb53a4fa8389e7b43f2d3a5836d2c09bc7fcd2a11d6f6ff7cfe46023f0119585fa22c36276f93e7e1965fda660
+SHA512 (selinux-policy-cd4eedd.tar.gz) = 9341072d38cd528f8eb93bf16d8e200826dca7ff27a7e793900182e936dbbfb7d6dfcdc1c0a7d64789bae75775eb39f61d8e8618b2ce492aec6aa23d6c443f99
+SHA512 (container-selinux.tgz) = 25ec96678e3fb5897ca13783e72736e7b6aa822d641d223dd7bc73349677975917645aead29a606583683dd53fddac162e000bb1851f9570be218157bfea06ff
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4