diff --git a/.gitignore b/.gitignore
index 5d17281..8cf86bc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,5 @@
 /WALinuxAgent-5bb9df7f2f485dbd5be057bbb657afe54bc1bf1b.tar.gz
 /WALinuxAgent-2.2.25.tar.gz
 /WALinuxAgent-2.2.32.tar.gz
+/WALinuxAgent-2.2.37.tar.gz
+/WALinuxAgent-2.2.38.tar.gz
diff --git a/WALinuxAgent.spec b/WALinuxAgent.spec
index 22f644c..d336533 100644
--- a/WALinuxAgent.spec
+++ b/WALinuxAgent.spec
@@ -1,8 +1,8 @@
 %global with_legacy 1
 
 Name:           WALinuxAgent
-Version:        2.2.32
-Release:        2%{?dist}
+Version:        2.2.38
+Release:        1%{?dist}
 Summary:        The Microsoft Azure Linux Agent
 
 License:        ASL 2.0
@@ -99,6 +99,12 @@ mv %{buildroot}%{_sysconfdir}/logrotate.d/waagent.logrotate %{buildroot}%{_sysco
 %endif
 
 %changelog
+* Thu Mar 14 2019 Vitaly Kuznetsov <vkuznets@redhat.com> - 2.2.38-1
+- Update to 2.2.38 (CVE-2019-0804)
+
+* Thu Mar 14 2019 Vitaly Kuznetsov <vkuznets@redhat.com> - 2.2.37-1
+- Update to 2.2.37
+
 * Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.32-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
 
diff --git a/sources b/sources
index 96f64ac..3515dcd 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (WALinuxAgent-2.2.32.tar.gz) = e3f51b07172a9e0ec232f37b1ab2e06c0187ce66df53e0a118c33a00d074107d27a375f78c0a55942c92bf331e1a5f18c4dd10bb90a5d4191a33a34c15472b58
+SHA512 (WALinuxAgent-2.2.38.tar.gz) = 87e8cd370ac890a1c01df1304b2e6a8ddb33ee5a0cf1530f55b1b582f9adfc315c756da6cf3fe4602b9a50abb8a1e5be144dd6e1dbd24b5e1ac6bfd052b62f8e