diff --git a/selinux-policy.spec b/selinux-policy.spec
index 21bd1a2..cdbf00a 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -12,7 +12,7 @@
 Summary: SELinux policy configuration
 Name:    selinux-policy
 Version: 3.14.2
-Release: 68
+Release: 69
 License: GPLv2+
 URL:     https://github.com/fedora-selinux/selinux-policy/
 
@@ -109,6 +109,8 @@ Patch6032: backport-Allow-dhcpc_t-domain-transition-to-chronyc_t.patch
 Patch6033: backport-Allow-nsswitch_domain-read-cgroup-files.patch
 Patch6034: backport-Allow-IPsec-and-certmonger-to-use-opencryptoki-servi.patch
 Patch6035: backport-Create-chronyd_pid_filetrans-interface.patch
+Patch6036: backport-iptables.fc-Remove-duplicate-file-context-entries.patch
+Patch6037: backport-iptables.fc-Add-missing-legacy-entries.patch
 
 BuildArch: noarch
 BuildRequires:  python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc
@@ -774,6 +776,9 @@ exit 0
 %endif
 
 %changelog
+* Mon Jun 7 2021 luhuaxin <1539327763@qq.com> - 3.14.2-69
+- fix context of ebtables
+
 * Mon May 31 2021 luhuaxin <1539327763@qq.com> - 3.14.2-68
 - backport some upstream patches
   backport-Allow-systemd-logind-dbus-chat-with-fwupd.patch