diff --git a/selinux-policy.spec b/selinux-policy.spec
index 0aa41aa..699fff4 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit dc98c54983569572791d0237989110a29ed7faa4
+%global commit 471437a05d18a759a7d675c29b42839c1b7d72a4
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 40.16
+Version: 40.17
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -824,6 +824,19 @@ exit 0
 %endif
 
 %changelog
+* Thu Apr 25 2024 Zdenek Pytela <zpytela@redhat.com> - 40.17-1
+- Define transitions for /run/libvirt/common and /run/libvirt/qemu
+- Allow systemd-sleep read raw disk data
+- Allow numad to trace processes in user namespace
+- Allow abrt-dump-journal-core connect to systemd-userdbd
+- Allow plymouthd read efivarfs files
+- Update the auth_dontaudit_read_passwd_file() interface
+- Label /dev/mmcblk0rpmb character device with removable_device_t
+- fix hibernate on btrfs swapfile (F40)
+- Allow nut to statfs()
+- Allow system dbusd service status systemd services
+- Allow systemd-timedated get the timemaster service status
+
 * Tue Apr 09 2024 Zdenek Pytela <zpytela@redhat.com> - 40.16-1
 - Allow keyutils-dns-resolver connect to the system log service
 - Allow qemu-ga read vm sysctls
diff --git a/sources b/sources
index 147d8a9..25d9eb6 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-dc98c54.tar.gz) = b9f2b1d99e41fc4d72a519ce98209b498a26a8375317331253ea234bf98c62da20d9e74bdd14f4f14da0f9958e012802ca578b1e0a59e57932f505490c92bc20
+SHA512 (selinux-policy-471437a.tar.gz) = 0c863f5fd6e78c1d0936eb1b1b8f64ed19594e5c10b755e2521d6a614e1f132867239d75d790c4c1d2bbcd5245e531bb3b8f08448e10b666012ab46c4c0d3952
+SHA512 (container-selinux.tgz) = cf192f8bdbcc58f56b24cae3cf557c441e07715eb8d9347bae11c801395a1cfdcefd23c8bb3d2fdfb30d231881504c0166cd065125fe7e7572b40dd0822f35bb
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = f6483571ea0a0291563c67f8bfbf45fc56ebe7a56486ce15fc24225ac8df22c8b75542967d46b9da43d4ff506142aaec2fa86ea19c90c07605c1b20fd210eb83