diff --git a/.gitignore b/.gitignore
index 49245fa..2480b87 100644
--- a/.gitignore
+++ b/.gitignore
@@ -343,3 +343,5 @@ serefpolicy*
 /selinux-policy-contrib-7e2f178.tar.gz
 /selinux-policy-contrib-af9fa4f.tar.gz
 /selinux-policy-108b4cd.tar.gz
+/selinux-policy-contrib-925fb5e.tar.gz
+/selinux-policy-aa6253c.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index f3d3092..db0fbd1 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 108b4cd659ae333951747a931593a4ecbac89b59
+%global commit0 aa6253cf8dbcff8d0d73a94c95b22a4813481bd8
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 af9fa4f244e473c37d955ea0283e44440fcfcd5d
+%global commit1 925fb5e79748b46e0dd5962ed2df760a9a287079
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.4
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -768,6 +768,9 @@ exit 0
 %endif
 
 %changelog
+* Tue Feb 26 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-2
+- Merge insmod_t, depmod_t and update_modules_t do kmod_t
+
 * Mon Feb 25 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-1
 - Allow openvpn_t domain to set capability BZ(1680276)
 - Update redis_enable_notify() boolean to fix sending e-mail by redis when this boolean is turned on
diff --git a/sources b/sources
index 3499a3d..cd6b3a4 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-contrib-af9fa4f.tar.gz) = 5df20b4e21ee838d4a12e98d558a18c48615640dee61d80b61509f7b62b09507d948d38521a3d6b0a7d643401193b408e90ac7c224cb0fd227ed662428d378ff
-SHA512 (selinux-policy-108b4cd.tar.gz) = e3874bbd612afa31885b852fde1682eec00e58738c6c2f26d0e17169c95501c3d39391ca8bfe04841c7b3d8f7d8067416949c450de17cc02b92819771c8cbc50
-SHA512 (container-selinux.tgz) = b2e8ecaa862fce328c605f94d373b99d572c20c616adb3baf9d51c9ca1eb6ad956851170e19d0d702e873e87c426f89023c1c9c82e379544466e5d754dc4249f
+SHA512 (selinux-policy-contrib-925fb5e.tar.gz) = 67db505efbb50744e38502a1f95fdd84ce869107fd42dc8eb840f58d562dba4957c48dbb9400c0acce146c2707cf5ab3823459f5710fa5448f10ac8beec00c1b
+SHA512 (selinux-policy-aa6253c.tar.gz) = 93fe4655ddf9833d0e40a6dc741691c8520b4e71cc8ef939151d5980d9519e8ba8ec175e1970455cb9166630570633c58fa86231dd5eac02b5e239ffaa4d86e2
+SHA512 (container-selinux.tgz) = 5b5a2a88056006637f2cf7f0c566efedd3591bb62077b40389f279d05c99abca1b61386f9425d158e774cc561b78334bfb59c776b9b162264688b74679656232