diff --git a/selinux-policy.spec b/selinux-policy.spec
index b2801efd..a3d27e8a 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 8974fee2ded69ffebb9a4df42332643a9419cb6d
+%global commit0 fd11a423f140771ada319a3cf11da0fc11711638
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 ec63def9e799bc3dd4a052f75b24d867bde7b57a
+%global commit1 7aa7510ae9cc3c6a965f0f88d74a66e8808dad12
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 130%{?dist}
+Release: 131%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -718,6 +718,16 @@ exit 0
 %endif
 
 %changelog
+* Wed Nov 08 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-131
+- Additional permissions for ip-vrf
+Resolves: RHEL-9981
+- Allow ip an explicit domain transition to other domains
+Resolves: RHEL-9981
+- Allow  winbind_rpcd_t processes access when samba_export_all_* is on
+Resolves: RHEL-5845
+- Allow system_mail_t manage exim spool files and dirs
+Resolves: RHEL-14186
+
 * Wed Oct 04 2023 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-130
 - Label msmtp and msmtpd with sendmail_exec_t
 Resolves: RHEL-1678
diff --git a/sources b/sources
index c745b431..45606a45 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (selinux-policy-contrib-ec63def.tar.gz) = e4e0a80022493f6665429fa7502c8dbeb4b97423fa94331766da691a1183f03fda5599ecd2d125e627bb0c422b2e3f9d825852eda54c1c5dbe2e367ba1802f45
-SHA512 (selinux-policy-8974fee.tar.gz) = 104bb815985c474b2debe33f4bbc964ffe28509a7158b86f8b0303a4126d15e4264a0ea6444947c3f96c942f098b6234c8057d9ebd08bb686feb42c280a70b38
+SHA512 (selinux-policy-fd11a42.tar.gz) = 89175fa9d0e4819e8534acceeb02b66880deafa004a2956bfa440430abaa5a5cc06223a63f9c96f45c5983fb041b75ec71eed5e53c04fa9ffe8a4eb70e85d66d
+SHA512 (selinux-policy-contrib-7aa7510.tar.gz) = d3261b19e06c687179fc73d3d16b466a95f681ad040c62ae5d50161df23ff81b670607c0fbfdf958473dce99083b351657c53aa154c01c0fcf16239f8603f20a
+SHA512 (container-selinux.tgz) = 3f0dcc52ee972c52a8cc5d76e0dde3177e80bec42c66b38947d4a0808f5856ab0d78fc5071239947c57aad1ae5c1a7b61eeada622000b2f3334b7d4b6d390666
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 61eaf7ad8d0ed7762eaf91b43cf851003c1033f87eab76a2e44a9bdfd7f400587709475333446bdb66130f75530c3b9b900d95be83a4fde1dc2738995549e39c