diff --git a/selinux-policy.spec b/selinux-policy.spec
index b26b1edc..e7488bf1 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 66a4b6ef3da654ad50046c79a87871fbd2f1a359
+%global commit f7e01621a353e1deff1aa54c027ef446188fb92e
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.17
+Version: 38.1.18
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -809,6 +809,28 @@ exit 0
 %endif
 
 %changelog
+* Fri Jul 21 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.18-1
+- Boolean: Allow virt_qemu_ga create ssh directory
+Resolves: rhbz#2181402
+- Allow virt_qemu_ga_t create .ssh dir with correct label
+Resolves: rhbz#2181402
+- Set default ports for keylime policy
+Resolves: RHEL-594
+- Allow unconfined service inherit signal state from init
+Resolves: rhbz#2186233
+- Allow sa-update connect to systemlog services
+Resolves: rhbz#2220643
+- Allow sa-update manage spamc home files
+Resolves: rhbz#2220643
+- Label only /usr/sbin/ripd and ripngd with zebra_exec_t
+Resolves: rhbz#2213605
+- Add the files_getattr_non_auth_dirs() interface
+Resolves: rhbz#2076933
+- Update policy for the sblim-sfcb service
+Resolves: rhbz#2076933
+- Define equivalency for /run/systemd/generator.early
+Resolves: rhbz#2213516
+
 * Thu Jun 29 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.17-1
 - Add the qatlib  module
 Resolves: rhbz#2080443
diff --git a/sources b/sources
index 0c296136..72d5cbee 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-66a4b6e.tar.gz) = 797e746ccd271fe531a91b2639aed06447fb2720267dadba225989d81634b1fb7b2a4e78262612a41b6073f6e0eca358b8c274adc33630cd3f0db1390cd57767
-SHA512 (container-selinux.tgz) = a20bfa9fa974b136ab16d38894d59612f7592c11af8632c9183184bb43d810a574ab94ec1efbcab56c326a076188731eddff9acf9bd37137a7085ff4324ac416
+SHA512 (selinux-policy-f7e0162.tar.gz) = 9251694ecd1c2fcbcf33d5c82a6c87ac96fd5cdf1fe04b305ebbf0114beeaa34d1647079e39972c1787daee9904c94b5cd0e0d0d7853267bf9441a853de627bc
+SHA512 (container-selinux.tgz) = cb09801e708bc1b520be0a599eb4122b813d355c09d76f0db7b8ab0fab3b422badc63057ab095ebacb582c6e8c183f88fe62a0114431ac82b03cdcec67cf4f4d
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4