diff --git a/selinux-policy.spec b/selinux-policy.spec
index d6129da..d9991a4 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit f60ed3b80468627c2d34be7d95084ae5c6ddb342
+%global commit 427ac6d895a8ae105c62901850916c57f830832f
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 37.12
+Version: 37.13
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -816,6 +816,19 @@ exit 0
 %endif
 
 %changelog
+* Mon Oct 03 2022 Zdenek Pytela <zpytela@redhat.com> - 37.13-1
+- Remove the ipa module
+- Allow sss daemons read/write unnamed pipes of cloud-init
+- Allow postfix_mailqueue create and use unix dgram sockets
+- Allow xdm watch user home directories
+- Allow nm-dispatcher ddclient plugin load a kernel module
+- Stop ignoring standalone interface files
+- Drop cockpit module
+- Allow init map its private tmp files
+- Allow xenstored change its hard resource limits
+- Allow system_mail-t read network sysctls
+- Add bgpd sys_chroot capability
+
 * Thu Sep 22 2022 Zdenek Pytela <zpytela@redhat.com> - 37.12-1
 - nut-upsd: kernel_read_system_state, fs_getattr_cgroup
 - Add numad the ipc_owner capability
diff --git a/sources b/sources
index 7db90fb..44f4bc2 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-f60ed3b.tar.gz) = be057dc091cf9cedd18dedcf10025cd8af4f53f1464643276a9883c2814c91007d8c9c13eff23d5badeb9fd37cae5fb28a9c735ed0f2c3df81090254539682d8
+SHA512 (selinux-policy-427ac6d.tar.gz) = 3d22b33eefc0375e4d58760475d6b1b84df5e844686c2307506a75c05cb24eb3751827fd7e9f12853c164320c5ebd32ffcbc2763a0b9bcc72dc34300efc05cbf
+SHA512 (container-selinux.tgz) = 977b1debfc0bc7336f41fc328a3aacdd1b707f46f1392de60ccb94a5041b5a2906413191723a13f9cb9f7eb8f742be7ab05fdf3edac8607bbb5fc090b394e6e9
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = d300ab419af8c16c5bcb24c35f715f83ba9e2b46320abeb6c33746d4aac6ef66448aede2ef63c7b78d5e541046b7a13b7c756854151a8bf61ce62f8d5c4404af