diff --git a/.gitignore b/.gitignore
index 59394d7..f9f3738 100644
--- a/.gitignore
+++ b/.gitignore
@@ -250,3 +250,5 @@ serefpolicy*
 /selinux-policy-ef9ecd7.tar.gz
 /selinux-policy-8a10ba8.tar.gz
 /selinux-policy-contrib-6777a17.tar.gz
+/selinux-policy-2c13be1.tar.gz
+/selinux-policy-contrib-27f5e51.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 0762ae8..d245aa8 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 8a10ba88e0c590ec04ac91a7325326ddde306c4c
+%global commit0 2c13be1fb543c51935785e7a43b798a9f35f5aa0
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 6777a17b5bb606e7fa9e7fd182959c1dd052881e
+%global commit1 27f5e51152311f5d4b3a0783bf187539874cb180
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.1
-Release: 9%{?dist}
+Release: 10%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
@@ -714,6 +714,14 @@ exit 0
 %endif
 
 %changelog
+* Thu Feb 22 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-10
+- refpolicy: Define extended_socket_class policy capability and socket classes
+- Make bluetooth_var_lib_t as mountpoint BZ(1547416)
+- Allow systemd to request load kernel module BZ(1547227)
+- Allow ipsec_t domain to read l2tpd pid files
+- Allow sysadm to read/write trace filesystem BZ(1547875)
+- Allow syslogd_t to mmap systemd coredump tmpfs files BZ(1547761)
+
 * Tue Feb 20 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-9
 - Fix broken cups Security Module
 - Allow dnsmasq_t domain dbus chat with unconfined users. BZ(1532079)
diff --git a/sources b/sources
index 5821cb3..2f99b40 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (container-selinux.tgz) = 6d81e8751b815df0e211eb8ecba693138c42cf9a6b54c3dfaa7a33c8abffee208d0a0fbe90a1c715e88a62b4a97dfdbff890c72870a4cae8b9370b4dd4efbd34
-SHA512 (selinux-policy-8a10ba8.tar.gz) = b59ea3f8fc0daf7029745360a6d23283638b0c5ce25bf0761794ee3f78087ac2a6a02b131fe3c144eca68e1e096f0e43b1d3d0ec960311254cb58e2d6671b27e
-SHA512 (selinux-policy-contrib-6777a17.tar.gz) = d3a7775940a11398a985558f65ea0423fd3962191b19508849dd2b3039e52074b251aadf12ff53541706931a19d30c3323925bd340658a8e73583f0216a69ab5
+SHA512 (selinux-policy-2c13be1.tar.gz) = 1da74c4666c89844313aed8d46d62f9835d8fc2fa9d55b5017c4cf827e55832b0b098cc53096a9e05974f5f3cedeb297896f00f0ebb070bfd5831edff21ea7fb
+SHA512 (selinux-policy-contrib-27f5e51.tar.gz) = 998d005bb1c8283631be43de0b9230b3babd4b011233f2a775d1a04171a2a063b1c2e6d5f5587afafc949b479430d6bcf4cc7ae8221013805e6140fed439c793
+SHA512 (container-selinux.tgz) = ee7df5af8fdf4414e09558e3b537b5e8ffda37f46b4774d92cb25ef8be3dfe5db180d368a038ff14eac5edb3fddf91acf2af72fb9ddacd08e9b865d97a952a39