diff --git a/selinux-policy.spec b/selinux-policy.spec
index 227a15a..c419f30 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 260611282c2559f73ea337224b2d093b506664f0
+%global commit 559054ccd9fa5e14d96f0f0d58a60290e8aff432
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.29
+Version: 39.1
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -814,6 +814,21 @@ exit 0
 %endif
 
 %changelog
+* Thu Nov 02 2023 Zdenek Pytela <zpytela@redhat.com> - 39.1-1
+- Support using systemd containers
+- Allow kernel_t to manage and relabel all files
+- Add missing optional_policy() to files_relabel_all_files()
+- Improve default file context(None) of /var/lib/authselect/backups
+- Allow targetd write to the syslog pid sock_file
+- Add ipa_pki_retrieve_key_exec() interface
+- Allow kdumpctl_t to list all directories with a filesystem type
+- Allow udev additional permissions
+- Allow udev load kernel module
+- Allow sysadm_t to mmap modules_object_t files
+- Add the unconfined_read_files() and unconfined_list_dirs() interfaces
+- Set default file context of HOME_DIR/tmp/.* to <<none>>
+- Allow kernel_generic_helper_t to execute mount(1)
+
 * Mon Oct 02 2023 Zdenek Pytela <zpytela@redhat.com> - 38.29-1
 - Allow sssd send SIGKILL to passkey_child running in ipa_otpd_t
 - Allow systemd-localed create Xserver config dirs
diff --git a/sources b/sources
index e4a9653..6606758 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-2606112.tar.gz) = 026641d1b8cd215ef72bc0bca2b05d9d23151bd5d91a0cf8885774388329fcae8852c63c0ff417c88c741153d4dde0cd5fd294c95800c79734002c199d0a254c
-SHA512 (container-selinux.tgz) = 34d05144dd01b082ba05e7aa1480e006b6b8a8aaa4ad9a2f18d0c9ae598f943ebe9e7944ae79b23f4275abc0578216a326e47be45bdde035c64826e4346b215e
+SHA512 (selinux-policy-559054c.tar.gz) = dd04f3c22ba91a73b100d0f758501d3daaa81ec9bab9976d21b0fade7f146f2456dca86549e122f5bb6fd691e996b2a49262e3db6bdd6e375d48954a764bbe42
+SHA512 (container-selinux.tgz) = ff73fb485289c92229ae699fc7711b39060cfea0eec1fa06deb5bc2766c5dfbe444c125a31e78013d53315a84a3d58cb6ae4789b5c5232181780a050cc26aef0
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4