diff --git a/selinux-policy.spec b/selinux-policy.spec
index d5095896..b2c1de89 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 3228b5d096ad8aa89ace23a1b48653fe5023c9bb
+%global commit db1bd84c88991b0f2b38f9ee0a5182562c124f5d
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.42
+Version: 38.1.43
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -809,6 +809,34 @@ exit 0
 %endif
 
 %changelog
+* Wed Jul 31 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.43-1
+- Allow rhsmcertd read/write access to /dev/papr-sysparm
+Resolves: RHEL-49599
+- Label /dev/papr-sysparm and /dev/papr-vpd
+Resolves: RHEL-49599
+- Allow rhsmcertd read, write, and map ica tmpfs files
+Resolves: RHEL-50926
+- Update afterburn file transition policy
+Resolves: RHEL-49735
+- Label /run/metadata with afterburn_runtime_t
+Resolves: RHEL-49735
+- Allow afterburn list ssh home directory
+Resolves: RHEL-49735
+- Support SGX devices
+Resolves: RHEL-50922
+- Allow systemd-pstore send a message to syslogd over a unix domain
+Resolves: RHEL-45528
+- Allow postfix_domain map postfix_etc_t files
+Resolves: RHEL-46332
+- Allow microcode create /sys/devices/system/cpu/microcode/reload
+Resolves: RHEL-26821
+- Allow svirt_tcg_t map svirt_image_t files
+Resolves: RHEL-27141
+- Allow systemd-hostnamed shut down nscd
+Resolves: RHEL-45033
+- Allow postfix_domain connect to postgresql over a unix socket
+Resolves: RHEL-6776
+
 * Thu Jul 18 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.42-1
 - Label samba certificates with samba_cert_t
 Resolves: RHEL-25724
diff --git a/sources b/sources
index bb65d6a7..cf88f577 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-3228b5d.tar.gz) = e13ad69276601da2be45cb5130170f09145477cd7034346ec3fe9c9557ac903f32c31d6080ef7da2dafd82446dfad2fd0a7c8484403eba1404ff591c75573efc
+SHA512 (selinux-policy-db1bd84.tar.gz) = 630e29916c0913da677cd455f13844dca0cf9cc0f7501ecdd583da11b02c1afb3ebcdd9d6592e024c52a4a1c9b46c8b0be74da6cf90c4b1b775d694fa3669023
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = f16efb3f9a2933036e627534e6520714526b3d13c78afe85ab653c32175fc5216ab1b40c80bfcf903887e20bc4db4930480a947359c1d7bc7c19b3c7ba198a81
+SHA512 (container-selinux.tgz) = ca6d302d43bec59b5227cc2776ec42756d6925f5ffd84fcb14a62e6c63b8ab169b072c308c8d1b5efddb36f72474ff3cc1e57d0bd52734500a9d524352b536d5