diff --git a/selinux-policy.spec b/selinux-policy.spec
index 835cd38..15f6583 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 6484d55fa6a48127989b4049495fda106889f356
+%global commit 61c90a7ada38cbbeaaef3b299b784721fe3c60c2
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.11
+Version: 38.12
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -813,6 +813,20 @@ exit 0
 %endif
 
 %changelog
+* Tue Apr 25 2023 Zdenek Pytela <zpytela@redhat.com> - 38.12-1
+- Allow telnetd read network sysctls
+- Allow munin system plugin read generic SSL certificates
+- Allow munin system plugin create and use netlink generic socket
+- Allow login_userdomain create user namespaces
+- Allow request-key to send syslog messages
+- Allow request-key to read/view any key
+- Add fs_delete_pstore_files() interface
+- Allow insights-client work with teamdctl
+- Allow insights-client read unconfined service semaphores
+- Allow insights-client get quotas of all filesystems
+- Add fs_read_pstore_files() interface
+- Allow generic kernel helper to read inherited kernel pipes
+
 * Fri Apr 14 2023 Zdenek Pytela <zpytela@redhat.com> - 38.11-1
 - Allow dovecot-deliver write to the main process runtime fifo files
 - Allow dmidecode write to cloud-init tmp files
diff --git a/sources b/sources
index 476686a..9b62529 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-6484d55.tar.gz) = b51fc406e4b388d875f4598205be2e3be033cda5657819527c2f8d752491789f0925bb133a58d7b964a24750119c1f4cd9413f4b0d5bc52bb9db429133a77445
-SHA512 (container-selinux.tgz) = 6ca587afdcdeb88ce4232a8ddc84aafdaebcc2ae71db5602ef7d4b9c8707f26e3901551b4f77cec5e1218491b4efedfb5e7897de17236d217ce4b28e89bbd705
+SHA512 (selinux-policy-61c90a7.tar.gz) = 084c2da710551f31d0e04cbd3c013f5896da657d6af20a3c0d81cc4a083e5de04bc168ba3539c347c77750dc8c0c40326e14839f33577133182eb7848daf471a
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = 3b16723e4505d1a7e42e86e0c14d8b672ddef139064f485d5ae0327566a0edf75c91746f934d27e81d0cdbcc005b468966a203b1d5d6933d0665d9035199ac4d