diff --git a/.gitignore b/.gitignore
index 7056803..00cb60a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -254,3 +254,5 @@ serefpolicy*
 /selinux-policy-contrib-27f5e51.tar.gz
 /selinux-policy-contrib-9facb1c.tar.gz
 /selinux-policy-e16d205.tar.gz
+/selinux-policy-bd7ad92.tar.gz
+/selinux-policy-contrib-f564072.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 243d269..9005079 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 e16d205404edadd93214b9622c8c795ea53abe77
+%global commit0 bd7ad92fc722388928f9441892a078018914cb7b
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 9facb1c4761877d6461472a98b8a0bc29229c83e
+%global commit1 f5640723a5d5982bde2a85b6003c12d2fbf976b6
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.1
-Release: 11%{?dist}
+Release: 12%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
@@ -714,6 +714,20 @@ exit 0
 %endif
 
 %changelog
+* Tue Mar 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-12
+- Allow l2tpd_t domain to create pppox sockets
+- Update dbus_system_bus_client() so calling domain could read also system_dbusd_var_lib_t link files BZ(1544251)
+- Add interface abrt_map_cache()
+- Update gnome_manage_home_config() to allow also map permission BZ(1544270)
+- Allow oddjob_mkhomedir_t domain to be dbus system client BZ(1551770)
+- Dontaudit kernel bug when several services requesting load kernel module
+- Allow traceroute and unconfined domains creating sctp sockets
+- Add interface corenet_sctp_bind_generic_node()
+- Allow ping_t domain to create icmp sockets
+- Allow staff_t to mmap abrt_var_cache_t BZ(1544273)
+- Fix typo bug in dev_map_framebuffer() interface BZ(1551842)
+- Dontaudit kernel bug when several services requesting load kernel module
+
 * Mon Mar 05 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-11
 - Allow vdagent_t domain search cgroup dirs BZ(1541564)
 - Allow bluetooth_t domain listen on bluetooth sockets BZ(1549247)
diff --git a/sources b/sources
index 6990676..0cb5004 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (container-selinux.tgz) = 928d818d9716a6fe7679777e3d1d23745eefffca1d260a609bf770762790fdf988df3bc7817ac22d5973ed1444bef8125617498c70681ea2944727aa85a7f73c
-SHA512 (selinux-policy-contrib-9facb1c.tar.gz) = 5f23eb8a311134c8b773a2b66f0761c07409b5645158b2a92f156eb4ce8bd25dfddd7f902bb37f75b97d91559e74ce6f25c21d7af7564b4e2d0d3b9d2d262664
-SHA512 (selinux-policy-e16d205.tar.gz) = 721ead4f225e9071724ee9a2b1c521de6289e90b4b5da3fd6458421b1cf611d48928eb41fc7d852cf6ff7cd5bfa4047bf64b292896dce0281953bb46b8bd6b2a
+SHA512 (container-selinux.tgz) = 3e1ba30cf99a5cde4c247c8026e6fe27f630ec3f5ee9babc547075abd51e308a159ecba4eb21d61b6b5fc4358c6663bf79f362e8531b4a3309b5dd15c40aeb62
+SHA512 (selinux-policy-bd7ad92.tar.gz) = 36239c76258f147d432de05a75cf26111671953f60a124cfab01bc8eb66be45e34c52357c0e0e864f30db045e8a7da75a75c16a2c0116716c26bedfb52485d6b
+SHA512 (selinux-policy-contrib-f564072.tar.gz) = 35587369042238f95d80f8591fc6159fecb4b08c1a72f4ea09dc4cb14198353f2cfb20db11b51cf20244656e408fd119abcaf02c1784455dd33b31c35f11f809