diff --git a/container-selinux.tgz b/container-selinux.tgz
index 2d003ddaca6ec9dfe0934915a14d5f0b265cc8c2..cc38a8c1ed2daf0e18c3ff8afede232eeff95ce4 100644
Binary files a/container-selinux.tgz and b/container-selinux.tgz differ
diff --git a/download b/download
index 272836c819e8dd25ba4a4b555eb343b4a7380564..5b86049522532b207b2eb9e5f9c0d7f55674a60f 100644
--- a/download
+++ b/download
@@ -1,2 +1,2 @@
-72f5b50287ef6a336076489baae9706f  selinux-policy-552905c.tar.gz
-a9a88faab7bfd020e9fccd82b3bbc0ac  selinux-policy-contrib-635888d.tar.gz
+0084a5ce368d3d96711fc2fc4c679a58  selinux-policy-contrib-aadacd8.tar.gz
+bdf4401d3481586878a9f1680d55c344  selinux-policy-fa87f85.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index ca4f46d18085aecd698762c4b4d76ae18d9430d5..7349283183988cb2a4dff79290d7843043b719b9 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,12 +1,12 @@
 %define anolis_release .0.1
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 552905cb94a7790fb51586b7778d303be21692a4
+%global commit0 fa87f8551f38f3977209b9c633766f28c8fda086
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 635888d8ead909d158ac612b59e518534c9104f4
+%global commit1 aadacd8e54ad79d73aca5b869cbd0c135d3a6f4d
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -30,7 +30,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 139%{anolis_release}%{?dist}
+Release: 139%{anolis_release}%{?dist}.1
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -719,9 +719,17 @@ exit 0
 %endif
 
 %changelog
-* Wed Jul 17 2024 Weitao Zhou <zhouwt@linux.alibaba.com> - 3.14.3-139.0.1
+* Wed Dec 25 2024 Weitao Zhou <zhouwt@linux.alibaba.com> - 3.14.3-139.0.1.1
 - Disable selinux by default
 
+* Fri Oct 25 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-139.1
+- Allow setsebool_t relabel selinux data files
+Resolves: RHEL-55432
+- Allow dirsrv-snmp map dirsv_tmpfs_t files
+Resolves: RHEL-32441
+- Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files
+Resolves: RHEL-32441
+
 * Fri Mar 08 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-139
 - Allow wdmd read hardware state information
 Resolves: RHEL-27507