diff --git a/selinux-policy.spec b/selinux-policy.spec
index 0b17c8eb..125e7779 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit eb644c87c0bb3d4b19be1b28975ce9c6333f0279
+%global commit 52f34fc4881b78295aaf4eef595ad381e53796ac
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,8 +23,8 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.35
-Release: 2%{?dist}
+Version: 38.1.36
+Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -809,6 +809,20 @@ exit 0
 %endif
 
 %changelog
+* Mon Apr 15 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.36-1
+- Allow systemd-timedated get the timemaster service status
+Resolves: RHEL-25978
+- postfix: allow qmgr to delete mails in bounce/ directory
+Resolves: RHEL-30271
+- Allow NetworkManager the sys_ptrace capability in user namespace
+Resolves: RHEL-24346
+- Label /dev/iommu with iommu_device_t
+Resolves: RHEL-22063
+- Allow qemu-ga read vm sysctls
+Resolves: RHEL-31892
+- Update repository link and branches names for c9s
+Related: RHEL-22960
+
 * Thu Mar 14 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.35-2
 - Rebuild
 Resolves: RHEL-26663
diff --git a/sources b/sources
index 2273beb0..244ce1da 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-eb644c8.tar.gz) = dd6180615324f24bda304b4ad66a678602c7bddf4be7b0aadc641d458a26c4a42ad2df01948f3330cf9887f09ea24de3205b5940b4b8468b5cf82c2d897d139a
+SHA512 (selinux-policy-52f34fc.tar.gz) = fb8484271d45b0bee94a61327a215d3419fac3b81a7e0255b2d6e681647611dcf3a3d1c760ccbc0d0bee4f1d285cbc965991d8d12f580e1e1d76b3bac858ba9c
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 708aa9ff85006c7ec91fec45bf04aa34ec4b1d9d3b71e4fbfdde8fbf6835b8465b1127b4d0e8f89d73fb70d0bea44a7d4b0293cc71459edc7099cf1000e8be95
+SHA512 (container-selinux.tgz) = d663d4e0e694e09923efd80062ce0e8b9d7e82a150fcd514b723d8f9c621167651dda1f56e17f5ef5170aa2289d6ab2f66b558759be3e004af981ebf455b5a0c