diff --git a/changelog b/changelog
index 312d62a..4a4214c 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,13 @@
+* Wed Jun 19 2024 Zdenek Pytela <zpytela@redhat.com> - 41.6-1
+- Allow certmonger read and write tpm devices
+- Allow all domains to connect to systemd-nsresourced over a unix socket
+- Allow systemd-machined read the vsock device
+- Update policy for systemd generators
+- Allow ptp4l_t request that the kernel load a kernel module
+- Allow sbd to trace processes in user namespace
+- Allow request-key execute scripts
+- Update policy for haproxyd
+
 * Tue Jun 18 2024 Zdenek Pytela <zpytela@redhat.com> - 41.5-1
 - Update policy for systemd-nsresourced
 - Correct sbin-related file context entries
diff --git a/selinux-policy.spec b/selinux-policy.spec
index b6bb6ae..4005fb0 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit ad31532558c687bfac9f449cbb264d0260161c77
+%global commit 19eca0625e0938aa7cb1ceddb599da3e4a5b0af4
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -17,7 +17,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 41.5
+Version: 41.6
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
diff --git a/sources b/sources
index 6aa201b..c907835 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-ad31532.tar.gz) = 930b2087e11c354f9fbe2e3eb0ce119f0af9e8d9313c1cb20222c42e84e62821cbd58cb817a8c11a321d3a96958eafbac507f11e421cb4c41296856e9ebaae18
-SHA512 (container-selinux.tgz) = ffc6fd9ff769a566711fa820cff68cf3c9b301ca43d20495b0ece2efe40bf511fa809da921158ced58f9f2dbda6ac0a6618b86e29d755e2d04280c2d6e073c98
+SHA512 (selinux-policy-19eca06.tar.gz) = bf22a4535059f17c05e553877e6354fe230bf47dcba37452f4b50f72f02758ca864722d3e58a92c7f2e7ed88ca9bb8ec460a9191386a2701cbb0e04b42d6eea1
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = 25e4bbebbe69102e64c19d871935321e85187b2db2c76295235480b361578a2d9eaf166008739bfeb06160bddd7840abddf016bf8a6649bcd75d2aa99af34b61