diff --git a/crypto-policies.spec b/crypto-policies.spec
index 7b8ef6d..8bd6251 100644
--- a/crypto-policies.spec
+++ b/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20211115
-%global git_commit 1b1c04cb7a8432ea99425192120219c462d9c440
+%global git_date 20220119
+%global git_commit 50109e78ab02518bf3451efe54db6f5c0e218913
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -36,7 +36,7 @@ Conflicts: openssl < 1.1.1h
 Conflicts: nss < 3.44.0
 Conflicts: libreswan < 3.28
 Conflicts: openssh < 8.5p1
-Conflicts: gnutls < 3.6.11
+Conflicts: gnutls < 3.7.3
 
 # Most users want this, the split is mostly for Fedora CoreOS
 Recommends: crypto-policies-scripts
@@ -195,6 +195,11 @@ end
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
+* Wed Jan 19 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220119-1.git50109e7
+- gnutls: switch to allowlisting
+  (https://fedoraproject.org/wiki/Changes/GnutlsAllowlisting)
+- openssl: add newlines at the end of the output
+
 * Mon Nov 15 2021 Alexander Sosedkin <asosedkin@redhat.com> - 20211115-1.git1b1c04c
 - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
 - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)
diff --git a/sources b/sources
index c041766..5e58f2d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crypto-policies-git1b1c04c.tar.gz) = 803e8a100e38865c25bce4a007b187e30786dfe2c868a4140107ed6b5b364e6f707d7e01bf11055f195d1dbf0066ab9ba12b95d484f0720cb5e17b635ef43e33
+SHA512 (crypto-policies-git50109e7.tar.gz) = d923d783bb49cf1ed80397e6e761b15ef86a826c96a80089fad61eb26d264fa4db9c708369eb6e148c30fa6167414f9119bd12d7847df78549a879d2dcfcac49