diff --git a/selinux-policy.spec b/selinux-policy.spec
index 48eda267..d56e7eac 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 79d56b295f67ea39e48d86ef2f7742b976524917
+%global commit 6885353faf0be1100afbd4503623b0e59f73fb3f
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 34.1.2
+Version: 34.1.3
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -792,6 +792,28 @@ exit 0
 %endif
 
 %changelog
+* Wed Apr 28 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.3-1
+- Allow domain create anonymous inodes
+Resolves: rhbz#1954145
+- Add anon_inode class to the policy
+Resolves: rhbz#1954145
+- Allow pluto IKEv2 / ESP over TCP
+Resolves: rhbz#1951471
+- Add brltty new permissions required by new upstream version
+Resolves: rhbz#1947842
+- Label /var/lib/brltty with brltty_var_lib_t
+Resolves: rhbz#1947842
+- Allow login_userdomain create cgroup files
+Resolves: rhbz#1951114
+- Allow aide connect to systemd-userdbd with a unix socket
+Resolves: rhbz#1926343
+- Allow cups-lpd read its private runtime socket files
+Resolves: rhbz#1947397
+- Label /etc/redis as redis_conf_t
+Resolves: rhbz#1947874
+- Add file context specification for /usr/libexec/realmd
+Resolves: rhbz#1946495
+
 * Thu Apr 22 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.2-1
 - Further update make-rhat-patches.sh for RHEL 9.0 beta
 - Add file context specification for /var/tmp/tmp-inst
diff --git a/sources b/sources
index 64455b0d..3ca506b2 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-79d56b2.tar.gz) = 5d1778d730adcbaf44e34f639d5b415dea0c621d85419fdbc321217700ff4aac02c8e680dfc3f707d0df469b069195d3f8a8dbc6306e7ee23b70558d16d18774
-SHA512 (container-selinux.tgz) = 71af62391f9e590693c7a45e56b37830385871aac5854e30afbaadc19448dffd41908f52c268d843eaeb3bfedeaafed561bc92a9d725d2223c745f67e8f813eb
+SHA512 (selinux-policy-6885353.tar.gz) = 75dd4f7a435758906c00421eb073b0e3fd154ab91c4026e90cbc243dee4db5709c3e1f1b1ee13dff70e9e3ae4f251bf8a54371c5cfc0baad653e896951d52529
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = 34acf1f75fccd1303bd94250dfd8839f38de893825cd89830af78a02233107d440e83fe4e5e947d3d5b0e837143315bb44fe17b2e0900b5b0bb1ffd01bdcf1c1