diff --git a/selinux-policy.spec b/selinux-policy.spec
index 4cc21669..6ecbbf4c 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit feefaa074e75466aa75c29f17a3d83ac6ce004f0
+%global commit f465aac2379225d7afd6ac4a30cf0e23f92d492a
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -24,7 +24,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.8
-Release: 4%{?dist}
+Release: 5%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -796,6 +796,16 @@ exit 0
 %endif
 
 %changelog
+* Wed Mar 03 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-5
+- Allow apmd watch generic device directories
+- Allow kdump load a new kernel
+- Add confidentiality lockdown permission to kernel_read_core_if()
+- Allow keepalived read nsfs files
+- Allow local_login_t get attributes of filesystems with ext attributes
+- Allow keepalived read/write its private memfd: objects
+- Add missing declaration in rpm_named_filetrans()
+- Change param description in cron interfaces to userdomain_prefix
+
 * Wed Feb 24 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-4
 - iptables.fc: Add missing legacy entries
 - iptables.fc: Remove some duplicate entries
diff --git a/sources b/sources
index 890df64c..c6f40c63 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-feefaa0.tar.gz) = 5d0fe18dc0d345a4cf5673ce28f1abdbdbcc5c8b97bbaa553e036ca559dfa0610b62b07ee7045e8ebefe95dcf0ef865dc3e764804c4561505bd3c92ed6572055
-SHA512 (container-selinux.tgz) = 4d92b9a5c23d9ac64bcb5c5578b14e6408f19156ba8d79cdb3b573ce602f9732c450564d6da3029484c9554de17c30dbb74921761f088abf20f6b3b513c7d53e
+SHA512 (selinux-policy-f465aac.tar.gz) = 8557af3db37496e35147e72f232aa6640205d4d526fe1c572720aa7626d92ebb6363cc98e11affce6eac99240250aefb76d83c5a927d9b16ab5727affe97ac18
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = f7ff24dfd854eaa19548715026c2ef8645403ca229fd0e2acc58b7e47ca544b47ae7070ab96c68a52f938c7d28d8198dfec3cdb8ff25c67fc83677b1689977bf