diff --git a/.cvsignore b/.cvsignore
index 0bf2966..b48c7e2 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -131,3 +131,4 @@ libsepol-2.0.18.tgz
 libsepol-2.0.19.tgz
 libsepol-2.0.20.tgz
 libsepol-2.0.21.tgz
+libsepol-2.0.23.tgz
diff --git a/libsepol.spec b/libsepol.spec
index bee6ff8..9b3df1d 100644
--- a/libsepol.spec
+++ b/libsepol.spec
@@ -1,7 +1,7 @@
 
 Summary: SELinux binary policy manipulation library 
 Name: libsepol
-Version: 2.0.21
+Version: 2.0.23
 Release: 1%{?dist}
 License: GPLv2+
 Group: System Environment/Libraries
@@ -97,6 +97,11 @@ exit 0
 /%{_lib}/libsepol.so.1
 
 %changelog
+* Thu Feb 28 2008 Dan Walsh <dwalsh@redhat.com> 2.0.23-1
+- Upgrade to latest from NSA
+	* Accept "Flask" as an alternate identifier string in kernel policies from Stephen Smalley.
+	* Add support for open_perms policy capability from Eric Paris.
+
 * Wed Feb 20 2008 Dan Walsh <dwalsh@redhat.com> 2.0.21-1
 - Upgrade to latest from NSA
 	* Fix invalid memory allocation in policydb_index_others() from Jason Tang.
diff --git a/sources b/sources
index f13d54e..a5dcb03 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-d99007eff69bbc120d756e3f211ed652  libsepol-2.0.21.tgz
+c8bffa62fa63192408657bf91dcecebe  libsepol-2.0.23.tgz