diff --git a/python-web.py.changes b/python-web.py.changes
index 9bd06e8..dc9da80 100644
--- a/python-web.py.changes
+++ b/python-web.py.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Mar 18 11:05:06 UTC 2019 - Michael Ströder <michael@stroeder.com>
+
+- Updated to 0.39
+  * Fixed a security issue with the form module
+  * Fixed a security issue with the db module
+
 -------------------------------------------------------------------
 Mon Jan 23 21:10:49 UTC 2017 - dmueller@suse.com
 
diff --git a/python-web.py.spec b/python-web.py.spec
index 901ac97..835cca9 100644
--- a/python-web.py.spec
+++ b/python-web.py.spec
@@ -17,7 +17,7 @@
 
 
 Name:           python-web.py
-Version:        0.38
+Version:        0.39
 Release:        0
 Url:            http://webpy.org/
 Summary:        web.py: makes web apps
@@ -26,6 +26,7 @@ Group:          Development/Languages/Python
 Source:         https://pypi.io/packages/source/w/web.py/web.py-%{version}.tar.gz
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  python-devel
+BuildRequires:  python-setuptools
 %if 0%{?suse_version} && 0%{?suse_version} <= 1110
 %{!?python_sitelib: %global python_sitelib %(python -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
 %else
diff --git a/web.py-0.38.tar.gz b/web.py-0.38.tar.gz
deleted file mode 100644
index 971817c..0000000
--- a/web.py-0.38.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:09c61b5b6b6e1dd558818d07dfbab3b2da0623603079c7d7223644b287f08870
-size 91877
diff --git a/web.py-0.39.tar.gz b/web.py-0.39.tar.gz
new file mode 100644
index 0000000..48afa21
--- /dev/null
+++ b/web.py-0.39.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7e7224493a51f6fbf02f3ce7f2011bcd9e5ebdfce0ee25e5921fdf665ba07542
+size 93852