diff --git a/.gitignore b/.gitignore
index f02fd7a..8db0631 100644
--- a/.gitignore
+++ b/.gitignore
@@ -272,3 +272,4 @@ serefpolicy*
 /selinux-policy-contrib-5ee31e8.tar.gz
 /selinux-policy-31ddb33.tar.gz
 /selinux-policy-contrib-a5ef4ca.tar.gz
+/selinux-policy-contrib-675493a.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index e5d74f8..c05e43c 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 a5ef4ca438655d634177187c7626591cd4282d16
+%global commit1 675493a6b46534621467ce77b908b6784c3b3b24
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.1
-Release: 21%{?dist}
+Release: 22%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
@@ -717,6 +717,12 @@ exit 0
 %endif
 
 %changelog
+* Wed Apr 18 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-22
+- Allow networkmanager domain to write to ecryptfs_t files BZ(1566706)
+- Allow l2tpd domain to stream connect to sssd BZ(1568160)
+- Dontaudit abrt_t to write to lib_t dirs BZ(1566784)
+- Allow NetworkManager_ssh_t domain transition to insmod_t BZ(1567630)
+
 * Mon Apr 16 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-21
 - Allow certwatch to manage cert files BZ(1561418)
 - Allow abrt_dump_oops_t domain to mmap all non security files BZ(1565748)
diff --git a/sources b/sources
index ac7f5dc..2e6e539 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
+SHA512 (container-selinux.tgz) = f695756ecfe78ab5539ffe2d71fcd502f7b8685072953ac07c7a23f0b651bfe60a45d7b56e0d28a9be2509793ab203fa5c038dfab58128c59f43ac078b5ceaee
+SHA512 (selinux-policy-contrib-675493a.tar.gz) = 1afb022659771def785ff73fd5da899b698794c371ded18e30d8ab0db8c8900f1e2c7d1a6cb4ac02d742432e45b31ffbce3c9d92d97885d6b9ff731ebae8274c
 SHA512 (selinux-policy-31ddb33.tar.gz) = 9b430dcd9c15c89b525f9a1d843c9a3f5a876735a9ccca2d2029c69e91391083e793fe4a59186d33223fa1c32c0ba84b2d0f8c08597885c477ea2903a8128f99
-SHA512 (selinux-policy-contrib-a5ef4ca.tar.gz) = d625756eedf3916dab62d49120a36f52ff46671054328f23f0c71b5a1cad565c8b91b42fa180d312b4b1b0fbcc64155f9f46146edfa0b8791717588be83feb92
-SHA512 (container-selinux.tgz) = 4150b92995ab0fe0f62f1c2078b25b4c1ca194d49ab212dcc4ecab311edc5a3de31938f31cbc246da95bf898c7fa6bc4b4a839769ae806a28cf5e662b956b897