diff --git a/selinux-policy.spec b/selinux-policy.spec
index a28c427..9a92715 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 28c2ee5fb5dfba79004bfa8dece14dfb62967319
+%global commit 0ed7e9a797ca5be979a5b0b3e626efd775004851
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,8 +23,8 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 40.18
-Release: 3%{?dist}
+Version: 40.19
+Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -860,6 +860,23 @@ exit 0
 %endif
 
 %changelog
+* Fri May 17 2024 Zdenek Pytela <zpytela@redhat.com> - 40.19-1
+- Allow postfix smtpd map aliases file
+- Ensure dbus communication is allowed bidirectionally
+- Label systemd configuration files with systemd_conf_t
+- Label /run/systemd/machine with systemd_machined_var_run_t
+- Allow systemd-hostnamed read the vsock device
+- Allow sysadm execute dmidecode using sudo
+- Allow sudodomain list files in /var
+- Allow setroubleshootd get attributes of all sysctls
+- Allow various services read and write z90crypt device
+- Allow nfsidmap connect to systemd-homed
+- Allow sandbox_x_client_t dbus chat with accountsd
+- Allow system_cronjob_t dbus chat with avahi_t
+- Allow staff_t the io_uring sqpoll permission
+- Allow staff_t use the io_uring API
+- Add support for secretmem anon inode
+
 * Thu May 16 2024 Adam Williamson <awilliam@redhat.com> - 40.18-3
 - Correct some errors in the RPM macro changes from -2
 
diff --git a/sources b/sources
index b25ddef..469019b 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-28c2ee5.tar.gz) = c1ffef79c8be225e9890d06af4a6fb0c7dd603e62274dad3354c1b38ce60b163ee2f1ae13eb7ca850fe9e6294c1d867c2c3fd55db8b4840c5b8e440b22806e28
+SHA512 (selinux-policy-0ed7e9a.tar.gz) = d31dab5b9845cad0ec586bf78d00a655b0165ce24af7839e6af43140937b9a890ccb5c7f1219883560929556f700404114d1ccaa9cc921e8eb7615aa8e0e6406
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 75faffa7c5fa5f96e5dd214e7de281cb71bc887af178355e7473c6ef1862ff90e1a7c9a0be496e950a6401568c36ff9c7d2d87d225897749474980ff3dad7246
+SHA512 (container-selinux.tgz) = bd286d53acd1e4c9ad376ce9a816a8ac7ae54cf7576db52443d1c30ea807ddfdd7b70c588f0a9d6160099a0ae9083b6377ae48d887625c36044388328126133f