diff --git a/.gitignore b/.gitignore
index 9555dbd..8cf86bc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,4 @@
 /WALinuxAgent-2.2.25.tar.gz
 /WALinuxAgent-2.2.32.tar.gz
 /WALinuxAgent-2.2.37.tar.gz
+/WALinuxAgent-2.2.38.tar.gz
diff --git a/WALinuxAgent.spec b/WALinuxAgent.spec
index a86e2de..d336533 100644
--- a/WALinuxAgent.spec
+++ b/WALinuxAgent.spec
@@ -1,7 +1,7 @@
 %global with_legacy 1
 
 Name:           WALinuxAgent
-Version:        2.2.37
+Version:        2.2.38
 Release:        1%{?dist}
 Summary:        The Microsoft Azure Linux Agent
 
@@ -99,6 +99,9 @@ mv %{buildroot}%{_sysconfdir}/logrotate.d/waagent.logrotate %{buildroot}%{_sysco
 %endif
 
 %changelog
+* Thu Mar 14 2019 Vitaly Kuznetsov <vkuznets@redhat.com> - 2.2.38-1
+- Update to 2.2.38 (CVE-2019-0804)
+
 * Thu Mar 14 2019 Vitaly Kuznetsov <vkuznets@redhat.com> - 2.2.37-1
 - Update to 2.2.37
 
diff --git a/sources b/sources
index d3ce2a7..3515dcd 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (WALinuxAgent-2.2.37.tar.gz) = 710e87676fd745d170931187873981c6da6b372c8defae2b91a8f31ac04342aedc471302d0ad5597c71484f528ee86f6b13f588067ce182e37c4fe6c99ea20b5
+SHA512 (WALinuxAgent-2.2.38.tar.gz) = 87e8cd370ac890a1c01df1304b2e6a8ddb33ee5a0cf1530f55b1b582f9adfc315c756da6cf3fe4602b9a50abb8a1e5be144dd6e1dbd24b5e1ac6bfd052b62f8e