diff --git a/selinux-policy.spec b/selinux-policy.spec
index 4fac792a..a1b32c5b 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit da810071c8a75585734a33abe453ae69f353d13b
+%global commit 0a4e2f7fc34ab556b285d64c0979faa932868357
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 40.13.6
+Version: 40.13.7
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -860,6 +860,44 @@ exit 0
 %endif
 
 %changelog
+* Thu Aug 08 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13.7-1
+- Add the swtpm.if interface file for interactions with other domains
+Resolves: RHEL-47274
+- Allow virtproxyd create and use its private tmp files
+Resolves: RHEL-40499
+- Allow virtproxyd read network state
+Resolves: RHEL-40499
+- Allow virtqemud domain transition on swtpm execution
+Resolves: RHEL-47274
+Resolves: RHEL-49763
+- Allow virtqemud relabel virt_var_run_t directories
+Resolves: RHEL-47274
+Resolves: RHEL-45464
+Resolves: RHEL-49763
+- Allow virtqemud domain transition on passt execution
+Resolves: RHEL-45464
+- Allow virt_driver_domain create and use log files in /var/log
+Resolves: RHEL-40239
+- Allow virt_driver_domain connect to systemd-userdbd over a unix socket
+Resolves: RHEL-44932
+Resolves: RHEL-44898
+- Update stalld policy for bpf usage
+Resolves: RHEL-50356
+- Allow boothd connect to systemd-userdbd over a unix socket
+Resolves: RHEL-45907
+- Allow linuxptp configure phc2sys and chronyd over a unix domain socket
+Resolves: RHEL-46011
+- Allow systemd-machined manage runtime sockets
+Resolves: RHEL-49567
+- Allow ip command write to ipsec's logs
+Resolves: RHEL-41222
+- Allow init_t nnp domain transition to firewalld_t
+Resolves: RHEL-52481
+- Update qatlib policy for v24.02 with new features
+Resolves: RHEL-50377
+- Allow postfix_domain map postfix_etc_t files
+Resolves: RHEL-46327
+
 * Thu Jul 25 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13.6-1
 - Allow virtnodedevd run udev with a domain transition
 Resolves: RHEL-39890
diff --git a/sources b/sources
index a22b836a..97b1f0e9 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-da81007.tar.gz) = a8184c43732c5393a42345dff76c72fb6855ec03226b892238d30ef275e30789edf4ff83582ac566b6c05528e271e14820695c0683ff704bf7807f74f53f25de
+SHA512 (selinux-policy-0a4e2f7.tar.gz) = 2a5d3ca2a3a389fee3d6232409aa387f915d9ffe53febc6964891388116f87b180eaf40cbd0d45fb1c5ca936d95b2f07b5d76975450b1f5b6e6df08fa71fd3c5
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = dcde448a22cd51ef7caf694554fc241c0cee2f5e5cacc9e223dbf76a4e5afa693f672ebd8ca744d501a96c46ae6d831f493ced9e40b29e75baca2f49703c774e
+SHA512 (container-selinux.tgz) = 06f5710247c8c01997933cb4ef0c95b6e59f08b21f628b98bfae5b12ebea4c3580d41e52573dd12c84805866ae7a171c461b1e16d2a791ffc6c542b2e5281257