diff --git a/.gitignore b/.gitignore
index 4ad1cc1..8cf86bc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,6 @@
 /WALinuxAgent-54d4ebde1a626e6bd000abdfd518e150b0495f37.tar.gz
 /WALinuxAgent-5bb9df7f2f485dbd5be057bbb657afe54bc1bf1b.tar.gz
 /WALinuxAgent-2.2.25.tar.gz
+/WALinuxAgent-2.2.32.tar.gz
+/WALinuxAgent-2.2.37.tar.gz
+/WALinuxAgent-2.2.38.tar.gz
diff --git a/WALinuxAgent.spec b/WALinuxAgent.spec
index 1821668..9527060 100644
--- a/WALinuxAgent.spec
+++ b/WALinuxAgent.spec
@@ -1,6 +1,6 @@
 Name:           WALinuxAgent
-Version:        2.2.25
-Release:        4%{?dist}
+Version:        2.2.38
+Release:        1%{?dist}
 Summary:        The Microsoft Azure Linux Agent
 
 Group:          System Environment/Daemons
@@ -91,6 +91,12 @@ mv %{buildroot}%{_sysconfdir}/logrotate.d/waagent.logrotate %{buildroot}%{_sysco
 %{_sbindir}/waagent2.0
 
 %changelog
+* Thu Mar 14 2019 Vitaly Kuznetsov <vkuznets@redhat.com> - 2.2.38-1
+- Update to 2.2.38 (CVE-2019-0804)
+
+* Thu Mar 14 2019 Vitaly Kuznetsov <vkuznets@redhat.com> - 2.2.37-1
+- Update to 2.2.37
+
 * Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.25-4
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
 
diff --git a/sources b/sources
index 78c5981..3515dcd 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (WALinuxAgent-2.2.25.tar.gz) = cd38f399baa1a9d60d88d9bc98ac458e153c1331877d2bc5a25f782a1dae22a0ceb8d8d07922716d663dca34e81eab923644019119adf47a0f086467f576b187
+SHA512 (WALinuxAgent-2.2.38.tar.gz) = 87e8cd370ac890a1c01df1304b2e6a8ddb33ee5a0cf1530f55b1b582f9adfc315c756da6cf3fe4602b9a50abb8a1e5be144dd6e1dbd24b5e1ac6bfd052b62f8e