diff --git a/selinux-policy.spec b/selinux-policy.spec
index 474af569..692f6549 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 732d5f76c0e6a21e4fbafaa402388376c34c7c51
+%global commit cc594909ed91e01158de01b5d43673ba2e5c8967
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.52
+Version: 38.1.53
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -810,6 +810,14 @@ exit 0
 %endif
 
 %changelog
+* Fri Feb 07 2025 Zdenek Pytela <zpytela@redhat.com> - 38.1.53-1
+- Allow svirt_t to connect to nbdkit over a unix stream socket
+Resolves: RHEL-56029
+- Allow power-profiles-daemon the bpf capability
+Resolves: RHEL-61117
+- Allow systemd-machined the kill user-namespace capability
+Resolves: RHEL-76352
+
 * Fri Jan 31 2025 Zdenek Pytela <zpytela@redhat.com> - 38.1.52-1
 - Add the files_read_root_files() interface
 Resolves: RHEL-70849
diff --git a/sources b/sources
index d02c258a..8c5c7068 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-732d5f7.tar.gz) = 47116fb7d71b835ac222e7eefe6a01e7af275e2e703493c5e78d829f833b260b57e1b5864a5b5bc04d1471385a2d3f31554251670f7babcb1009a37c1d6c984a
+SHA512 (selinux-policy-cc59490.tar.gz) = be189db2a1328cc94e2a1cd8a2dbb22b827927d3631859ef566983eb3dc2d8dead8bc4f70845a853e1e72c8e7b810221a6bbd0fc510a64e03c4d0d4d8f83caff
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = aada8cd362a4c2640a2d87f74a3c68d6ee3a3eb49fdd593ba8b776aa2b44963b534bb561369b966cb34dc59fb12457c60fc7d4d15f75252519cc69de603a1d3a
+SHA512 (container-selinux.tgz) = f774e0f1a8ef83cd53869cddd583eab5b9703370ce793d765448ba936d09a7321350a593c6453fca640224216a3839eeeac388b6b821ba1294b6f97fb8a24f0a