diff --git a/refpolicy-2.20081210.tar.bz2 b/refpolicy-2.20081210.tar.bz2
new file mode 100644
index 0000000..d572d90
--- /dev/null
+++ b/refpolicy-2.20081210.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2ac9bc01e21541ee8e5e374320e9daeee11d807a7c197142e5c9eea7e096ac77
+size 458911
diff --git a/refpolicy-20081014.tar.bz2 b/refpolicy-20081014.tar.bz2
deleted file mode 100644
index 00263fa..0000000
--- a/refpolicy-20081014.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:704b8d52026d6a56c368612f3422534eed763297b9feae07dcfc19f72ceaf684
-size 468703
diff --git a/selinux-policy.changes b/selinux-policy.changes
index f3f49c8..395e760 100644
--- a/selinux-policy.changes
+++ b/selinux-policy.changes
@@ -1,7 +1,41 @@
+-------------------------------------------------------------------
+Wed Jan 14 14:20:23 CET 2009 - prusnak@suse.cz
+
+- updated to version 2008.12.10
+  * Fix consistency of audioentropy and iscsi module naming.
+  * Debian file context fix for xen from Russell Coker.
+  * Xserver MLS fix from Eamon Walsh.
+  * Add omapi port for dhcpcd.
+  * Deprecate per-role templates and rolemap support.
+  * Implement user-based access control for use as role separations.
+  * Move shared library calls from individual modules to the domain module.
+  * Enable open permission checks policy capability.
+  * Remove hierarchy from portage module as it is not a good example of hieararchy.
+  * Remove enableaudit target from modular build as semodule -DB supplants it.
+  * Added modules:
+    - milter (Paul Howarth)
+
 -------------------------------------------------------------------
 Thu Oct 16 16:08:32 CEST 2008 - prusnak@suse.cz
 
 - updated to version 2008.10.14
+  * Debian update for NetworkManager/wpa_supplicant from Martin Orr.
+  * Logrotate and Bind updates from Vaclav Ovsik.
+  * Init script file and domain support.
+  * Glibc 2.7 fix from Vaclav Ovsik.
+  * Samba/winbind update from Mike Edenfield.
+  * Policy size optimization with a non-security file attribute from James Carter.
+  * Database labeled networking update from KaiGai Kohei.
+  * Several misc changes from the Fedora policy, cherry picked by David Hardeman.
+  * Large whitespace fix from Dominick Grift.
+  * Pam_mount fix for local login from Stefan Schulze Frielinghaus.
+  * Issuing commands to upstart is over a datagram socket, not the initctl named pipe.
+  * Updated init_telinit() to match.
+  * Added modules:
+    - cyphesis (Dan Walsh)
+    - memcached (Dan Walsh)
+    - oident (Dominick Grift)
+    - w3c (Dan Walsh)
 
 -------------------------------------------------------------------
 Tue Jul 22 11:57:34 CEST 2008 - prusnak@suse.cz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index b8c1d64..cf23602 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -12,7 +12,7 @@
 
 
 Name:           selinux-policy
-Version:        20081014
+Version:        2.20081210
 Release:        1
 Url:            http://oss.tresys.com/projects/refpolicy/
 License:        GPL v2