diff --git a/.crypto-policies.metadata b/.crypto-policies.metadata
index 1090ce6..96e878d 100644
--- a/.crypto-policies.metadata
+++ b/.crypto-policies.metadata
@@ -1 +1 @@
-f882c8cd6bbc33938ade937b37d3fde792a1eb63 SOURCES/crypto-policies-git5e24938.tar.gz
+0890ea06566ded55ed48890da1a2fbb2128268b7 SOURCES/crypto-policies-git0fbe86f.tar.gz
diff --git a/.gitignore b/.gitignore
index 272ef16..3e67c57 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/crypto-policies-git5e24938.tar.gz
+SOURCES/crypto-policies-git0fbe86f.tar.gz
diff --git a/SPECS/crypto-policies.spec b/SPECS/crypto-policies.spec
index 2dd6ed0..d2e47e9 100644
--- a/SPECS/crypto-policies.spec
+++ b/SPECS/crypto-policies.spec
@@ -1,12 +1,12 @@
-%global git_date 20220223
-%global git_commit 5e2493802591a53ea9a688a3199e483766cf00c5
+%global git_date 20220815
+%global git_commit 0fbe86f88d51fb210d536908b10450eb7467e1d6
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
 
 Name:           crypto-policies
 Version:        %{git_date}
-Release:        1.git5203b41%{?dist}.1
+Release:        1.git%{git_commit_hash}%{?dist}
 Summary:        System-wide crypto policies
 
 License:        LGPLv2+
@@ -32,7 +32,7 @@ BuildRequires: make
 Conflicts: openssl < 1:3.0.1-10
 Conflicts: nss < 3.44.0
 Conflicts: libreswan < 3.28
-Conflicts: openssh < 8.5p1
+Conflicts: openssh < 8.7p1-10
 Conflicts: gnutls < 3.7.2-3
 
 %description
@@ -60,7 +60,6 @@ to enable or disable the system FIPS mode.
 %autopatch -p1
 
 %build
-export OLD_GNUTLS=1  # FIXME: remove once gnutls-3.7.2-3 is in buildroot
 %make_build
 
 %install
@@ -186,8 +185,15 @@ end
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
-* Mon Apr 04 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41.1
+* Mon Aug 15 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220815-1.git0fbe86f
+- openssh: add RSAMinSize option following min_rsa_size
+
+* Wed Apr 27 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220427-1.gitb2323a1
+- bind: control ED25519/ED448
+
+* Mon Apr 04 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
 - DEFAULT: drop DNSSEC SHA-1 exception
+- openssh: add support for sntrup761x25519-sha512@openssh.com
 
 * Wed Feb 23 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
 - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY