diff --git a/.gitignore b/.gitignore
index ab303214..177e94f6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -383,3 +383,5 @@ serefpolicy*
 /selinux-policy-5b2d489.tar.gz
 /selinux-policy-contrib-7d3bcf4.tar.gz
 /selinux-policy-905153e.tar.gz
+/selinux-policy-contrib-9e9bb01.tar.gz
+/selinux-policy-f1ee18a.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 96f94a07..9b108ef2 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 905153ec95cbd126ca77dccae57ef453bc0ad2a5
+%global commit0 f1ee18a0881e4e4e31c5431079b8ad607fbf20bb
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 7d3bcf40795a24bc1f808deeb5c5b1a54ecc6197
+%global commit1 9e9bb01a0b4a6e716368c4c73639363daae12fe7
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.4
-Release: 22%{?dist}
+Release: 23%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -787,6 +787,11 @@ exit 0
 %endif
 
 %changelog
+* Wed Jul 10 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-23
+- Update dbusd policy and netowrkmanager to allow confined users to connect to vpn over NetworkManager
+- Fix all interfaces which cannot by compiled because of typos
+- Allow X userdomains to mmap user_fonts_cache_t dirs
+
 * Mon Jul 08 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-22
 - Label /var/kerberos/krb5 as krb5_keytab_t
 - Allow glusterd_t domain to setpgid
diff --git a/sources b/sources
index 3c0c9591..88360eaf 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (selinux-policy-contrib-7d3bcf4.tar.gz) = 2869511bad83649d066471781b9910ab577a2ae981a0f046688c7d5ec83203e1549013d1a164295e77fcb83c5c8adcdf1e7a191c117610aa092c91abd8046fee
-SHA512 (selinux-policy-905153e.tar.gz) = 1b8e6d4c1b47f5f5436ad61e4777e9c13b0746ea802a51ddcc542c0f60c24fb5dc58a4303f645fb1d1c7336c23302e1c56829bfdf460b841414ee7791a9a15d3
-SHA512 (container-selinux.tgz) = e7cf088717a965271df59ab9b145d0df9f5b06e7a8b4979b435cb9141d43a68ddae0e62127c1afb4e94fe2bb6428e42c8f276d4a8982322532a9da28a1bd33e8
+SHA512 (selinux-policy-contrib-9e9bb01.tar.gz) = 455867d510d56daca40bc152f3c62ab73d4715331841785862386ec009ebeea1a736f791e1171fbfa8d82a4acc7ea0b5801200266f2a5b098d1c8d036fb8159f
+SHA512 (selinux-policy-f1ee18a.tar.gz) = dbaf7d5f30ba8823ff24e7d4dc0b20c3551b150dea1eb64bca37d1ff836916f1bad87eba18feba5a98c99b93943828734e29ff0432c343a669b6e9dd2b8945dc
+SHA512 (container-selinux.tgz) = 7528e71d2143f327362c27d1ac8c48bb4e627a7a7e5483bbf7ad73d92fbdb65f19cb33b057ca51b71fd542cf27c31b0e0a9eb8ac714bb002db1ced1c8144149d
 SHA512 (macro-expander) = b4f26e7ed6c32b3d7b3f1244e549a0e68cb387ab5276c4f4e832a9a6b74b08bea2234e8064549d47d1b272dbd22ef0f7c6b94cd307cc31ab872f9b68206021b2