diff --git a/.gitignore b/.gitignore
index c350877..690ca37 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
 SOURCES/container-selinux.tgz
-SOURCES/selinux-policy-contrib-fb815bc.tar.gz
+SOURCES/selinux-policy-contrib-5a2609e.tar.gz
 SOURCES/selinux-policy-db25c0e.tar.gz
diff --git a/.selinux-policy.metadata b/.selinux-policy.metadata
index 41f73c3..049c48c 100644
--- a/.selinux-policy.metadata
+++ b/.selinux-policy.metadata
@@ -1,3 +1,3 @@
-ba805a0572301b3cfc64992d859839ee41017104 SOURCES/container-selinux.tgz
-93ba801d00e771257f02e4d79fd50123d8cc78f1 SOURCES/selinux-policy-contrib-fb815bc.tar.gz
+b15936d7a0b54d2d9465985a6ebd46929b8df41f SOURCES/container-selinux.tgz
+2f9271ceebb36ff8f919e9d46a4590cf797b624e SOURCES/selinux-policy-contrib-5a2609e.tar.gz
 4ddf11da780b6eaa124536869c85baec229640c1 SOURCES/selinux-policy-db25c0e.tar.gz
diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec
index 6fee4d6..02eba5a 100644
--- a/SPECS/selinux-policy.spec
+++ b/SPECS/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 fb815bc5fef94fedb15ed4d6c6ea262a4cd23840
+%global commit1 5a2609e2e12a8ff8ce4417f093467f5581994965
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 52%{?dist}
+Release: 53%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -715,6 +715,14 @@ exit 0
 %endif
 
 %changelog
+* Sun Aug 23 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-53
+- Allow certmonger fowner capability
+Resolves: rhbz#1870596
+- Define named file transition for saslauthd on /tmp/krb5_0.rcache2
+Resolves: rhbz#1870300
+- Label /usr/libexec/qemu-pr-helper with virtd_exec_t
+Resolves: rhbz#1867115
+
 * Thu Aug 13 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-52
 - Add ipa_helper_noatsecure() interface unconditionally
 Resolves: rhbz#1853432