diff --git a/vsftpd.spec b/vsftpd.spec
index 35e803f..fbe289d 100644
--- a/vsftpd.spec
+++ b/vsftpd.spec
@@ -2,7 +2,7 @@
 
 Name:    vsftpd
 Version: 3.0.3
-Release: 13%{?dist}
+Release: 14%{?dist}
 Summary: Very Secure Ftp Daemon
 
 Group:    System Environment/Daemons
@@ -72,6 +72,7 @@ Patch40: 0040-Use-system-wide-crypto-policy.patch
 Patch41: 0041-Document-the-new-default-for-ssl_ciphers-in-the-man-.patch
 Patch42: 0042-When-handling-FEAT-command-check-ssl_tlsv1_1-and-ssl.patch
 Patch43: 0043-Enable-only-TLSv1.2-by-default.patch
+Patch44: 0044-Disable-anonymous_enable-in-default-config-file.patch
 
 %description
 vsftpd is a Very Secure FTP daemon. It was written completely from
@@ -141,6 +142,10 @@ mkdir -p $RPM_BUILD_ROOT/%{_var}/ftp/pub
 %{_var}/ftp
 
 %changelog
+* Tue Jan 02 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-14
+- Disable anonymous_enable in default config file
+- Resolves: rhbz#1338637
+
 * Thu Dec 21 2017 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-13
 - Document the new default for ssl_ciphers in the man page
 - Related: rhbz#1483970