diff --git a/changelog b/changelog
index 1191d01f..cf8b3bc0 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,15 @@
+* Tue Nov 11 2025 Zdenek Pytela <zpytela@redhat.com> - 42.1.11-1
+- Allow iotop stream connect to systemd-userdbd
+Resolves: RHEL-105481
+- Allow insights-client manage /etc symlinks
+Resolves: RHEL-107589
+- Allow insights-client get attributes of the rpm executable
+Resolves: RHEL-124855
+- Allow nfsidmapd search virt lib directories
+Resolves: RHEL-68722
+- Allow kdump search kdumpctl_tmp_t directories
+Resolves: RHEL-116041
+
 * Mon Oct 27 2025 Zdenek Pytela <zpytela@redhat.com> - 42.1.10-1
 - Allow sshd-auth read generic proc files
 Resolves: RHEL-107732
diff --git a/selinux-policy.spec b/selinux-policy.spec
index dd798529..c1e753df 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -6,7 +6,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 9bf484b4181e69f981da5332e8c66a3f3a76e21e
+%global commit 2a83040eb2af839df32d67dd5db3307c9733b2e9
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -18,7 +18,7 @@
 %define CHECKPOLICYVER 3.9
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 42.1.10
+Version: 42.1.11
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
diff --git a/sources b/sources
index 056df932..4479fc5f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-9bf484b.tar.gz) = 063b5db89691db1fb78d302f6308419c9b668eaf941f513ec89ec9a50b3b802b9ada4a627860af8ac2d84b0aba82e8564560ffe4af26675f49e094e7b7f922b0
+SHA512 (selinux-policy-2a83040.tar.gz) = c87032ba51f1d2d9ab887b048a8d7d73f68410a48b72486fcacbb500a1baa34a90be7e5e73dd3487a446bfe9f9e94fcc2eaa8582010ff10a89520fc6ab876e36
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = edac9f01347899b5cd2ecb637147c7eabba932474218a27d60a351b13703aca3bed1b00a591f1e085a4bb89622149c714c7923a60a41dbf40c3776628288ab7d
+SHA512 (container-selinux.tgz) = bb64cbf6fdca0398007b8796a0eccc6e3298d304ff84ec06204e263bb940403e545ca041069903f0b4fcd861acc1ee213230c898be7ed9b51ed0ff761fd05100