diff --git a/selinux-policy.spec b/selinux-policy.spec
index 962ec15d..d416f84f 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 21faab3e3f4c96fc7208757fcc64794aa4283355
+%global commit e0a45e734b41067e78f94cd71484c0d24d994950
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -26,7 +26,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.62
+Version: 38.1.63
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -906,6 +906,20 @@ exit 0
 %endif
 
 %changelog
+* Wed Jul 30 2025 Zdenek Pytela <zpytela@redhat.com> - 38.1.63-1
+- Allow samba-dcerpcd send sigkills to passwd
+Resolves: RHEL-100032
+- Allow power-profiles-daemon watch sysfs directories
+Resolves: RHEL-100718
+- Allow power-profiles-daemon write sysfs files
+Resolves: RHEL-100718
+- Allow hostapd write to socket files in /tmp
+Resolves: RHEL-59683
+- Allow irqbalance search sssd lib directories
+Resolves: RHEL-1556
+- Add insights_client_delete_lib_dirs() interface
+Related: RHEL-59145
+
 * Fri Jul 18 2025 Zdenek Pytela <zpytela@redhat.com> - 38.1.62-1
 - Allow "hostapd_cli ping" run as a systemd service
 Resolves: RHEL-59683
diff --git a/sources b/sources
index 1d6d6bec..f1dc4c2f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-21faab3.tar.gz) = 2843554bb1e1663730d4ddc5f9a1276d459bbf7d5261cd34bbc98361ef967e4d703ce6713a45f280385809d7391dad27edc1895f16374ce945f3fee6b0ae3390
+SHA512 (selinux-policy-e0a45e7.tar.gz) = 7c3ae116e597856d7b06260bfe42459b0dc60c1e039c50f4bff28fca7d532bb76ac4d26797de05aa1c50d9a8d461ff197034a78482c92c690684aaa209004efe
+SHA512 (container-selinux.tgz) = 8693f303ad3ad5069f96e82dae1dc0204373b74da33d7bcc370a9b2e8b0db7cb0ccf4696728df158cb4cff446ebe2f4da05f4a9414be1d9f7f38164740bdb6a3
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = edcee684443e2c47d205ac7bd71b40f3612a2c84abb91a37daad82904ccb2e9bc40b38b3c24f347fa0d72e2ed3dc730e1a5cae10176233c9dc94d249da075920