diff --git a/selinux-policy.spec b/selinux-policy.spec
index e449e656..962ec15d 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit f6575d3ef7330b3e669deb116575a345cbd0e46b
+%global commit 21faab3e3f4c96fc7208757fcc64794aa4283355
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -26,7 +26,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.61
+Version: 38.1.62
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -906,6 +906,20 @@ exit 0
 %endif
 
 %changelog
+* Fri Jul 18 2025 Zdenek Pytela <zpytela@redhat.com> - 38.1.62-1
+- Allow "hostapd_cli ping" run as a systemd service
+Resolves: RHEL-59683
+- Allow systemd-timedated start/stop timemaster services
+Resolves: RHEL-95690
+- Allow lldpd connect to systemd-machined over a unix socket
+Resolves: RHEL-96167
+- Allow power-profiles-daemon get attributes of filesystems with extended attributes
+Resolves: RHEL-100718
+- Allow tuned-ppd watch_reads sysfs directories
+Resolves: RHEL-101687
+- Allow tuned-ppd watch sysfs directories
+Resolves: RHEL-101687
+
 * Mon Jul 14 2025 Zdenek Pytela <zpytela@redhat.com> - 38.1.61-1
 - Fix incorrect /run and /usr/bin file context entries
 Resolves: SELINUX-4392
diff --git a/sources b/sources
index f7cebbbc..1d6d6bec 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-f6575d3.tar.gz) = fbbde10966a2f4a8e809e2c1af46505a2e17bf0fa10f15583344db9a8a9491fc37ea338465e6bf96b917ef9591732e5e25f67d069d2951985f6d05cf9008cc01
+SHA512 (selinux-policy-21faab3.tar.gz) = 2843554bb1e1663730d4ddc5f9a1276d459bbf7d5261cd34bbc98361ef967e4d703ce6713a45f280385809d7391dad27edc1895f16374ce945f3fee6b0ae3390
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 5e45205f237b9fbda454fe2aad38a71e308c71cb0fc452111c36b917cf36773e6d71a9aeb5f520d6a79bff4d974085b642a3ece183ca2702aebe3e107cb5e160
+SHA512 (container-selinux.tgz) = edcee684443e2c47d205ac7bd71b40f3612a2c84abb91a37daad82904ccb2e9bc40b38b3c24f347fa0d72e2ed3dc730e1a5cae10176233c9dc94d249da075920