diff --git a/selinux-policy.spec b/selinux-policy.spec
index 4cd161f2..8d8675a7 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 4188842590c2d66f321a4fb62fa42093d37b7d1c
+%global commit f81c762b515ed1263ff63766afada4f590642dad
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.37
+Version: 38.1.38
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -809,6 +809,26 @@ exit 0
 %endif
 
 %changelog
+* Thu May 16 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.38-1
+- Add boolean qemu-ga to run unconfined script
+Resolves: RHEL-31211
+- Ensure dbus communication is allowed bidirectionally
+Resolves: RHEL-35782
+- Allow logwatch_mail_t read network sysctls
+Resolves: RHEL-34135
+- Allow sysadm execute dmidecode using sudo
+Resolves: RHEL-16104
+- Allow sudodomain list files in /var
+Resolves: RHEL-16104
+- Allow various services read and write z90crypt device
+Resolves: RHEL-33361
+- Allow system_cronjob_t dbus chat with avahi_t
+Resolves: RHEL-32290
+- Allow setroubleshootd get attributes of all sysctls
+Resolves: RHEL-34078
+- Remove permissive domain for bootupd_t
+Resolves: RHEL-22173
+
 * Tue May 07 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.37-1
 - Allow numad to trace processes in user namespace
 Resolves: RHEL-33994
diff --git a/sources b/sources
index 051d3e96..b1dda740 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-4188842.tar.gz) = 811fcdac352134287062ca433539a7818b75bfe74e59c42cd1f3e01428785993cda268d9f87a0cf9169169423698de7a3a12d3db48b7a1b07d91158f7b51df7d
+SHA512 (selinux-policy-f81c762.tar.gz) = ccecdd46657eb6265c6dec2121dd7b7efbd6305eca34061a4bee000bebaa9bab67973640784099b916549670b424610c035a43663a8de963e68d652460baad88
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = d6b97d63ded66bd95d4b4cb34aa209fc58cf0683ec237ae08af5af8486ea78ec32e45151f6a0f2c6f03a7cad61805dd35a9d77effc724be2a9da21e1bb5ff613
+SHA512 (container-selinux.tgz) = 14935d491769b0408a2037c7760b51ca0fbb6949b50484d77468454b9d320984fe5d79b8e70b4236aca23bc363bdde46819e20f25b17f6a9418814da610515d9