diff --git a/container-selinux.tgz b/container-selinux.tgz
index a9565105b627954a92a788c7994de265259fc079..c34e909f8aab70401e72c083b4f5d8b05cfecf68 100644
Binary files a/container-selinux.tgz and b/container-selinux.tgz differ
diff --git a/download b/download
index a64b6aa98c6b2c94c06be9a6c89f01235bfa1bab..9a75f38657e69726e102a853c65ac9ec53e8bf3a 100644
--- a/download
+++ b/download
@@ -1,2 +1,2 @@
 eefb9a0f9f65c64e8f6eef0f454f5078  selinux-policy-ab10edf.tar.gz
-39afa6397c13613fcd318928c6ea9da7  selinux-policy-contrib-191fa35.tar.gz
+357b0101587572f2b24954174f6644cc  selinux-policy-contrib-0dcd5a2.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index c31704159537e3bafb66cc9d023f861695cb6bd1..8806004d97699fa64709a12913b80bfc38b34cdd 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -6,7 +6,7 @@
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 191fa35ac243f8f3f1db0a9e95c77b6e308a16e9
+%global commit1 0dcd5a2a17170740399ea0c6b2c1be5a21c0f701
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -30,7 +30,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 95%{anolis_release}%{?dist}
+Release: 95%{anolis_release}%{?dist}.1
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -718,10 +718,14 @@ exit 0
 %endif
 
 %changelog
-* Tue May 17 2022 Weitao Zhou <zhouwt@linux.alibaba.com> - 3.14.3-95.0.1
+* Wed Aug 3 2022 Weitao Zhou <zhouwt@linux.alibaba.com> - 3.14.3-95.0.1.1
 - Disable selinux by default
 - cherry-pick [bfc16aa]
 
+* Thu Jun 09 2022 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-95.1
+- Label more vdsm utils with virtd_exec_t
+Resolves: rhbz#2095184
+
 * Thu Mar 24 2022 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-95
 - Allow hostapd talk with unconfined user over unix domain dgram socket
 Resolves: rhbz#2064284