diff --git a/openscap-1.3.7.tar.gz b/openscap-1.3.7.tar.gz
deleted file mode 100644
index 6c56490..0000000
--- a/openscap-1.3.7.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d31527afa2a315ceba02e2ca7e2d5dbd07c4113febaed60752affef4c79f7233
-size 14023080
diff --git a/openscap-1.3.8.tar.gz b/openscap-1.3.8.tar.gz
new file mode 100644
index 0000000..5b25d27
--- /dev/null
+++ b/openscap-1.3.8.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:67d2e8ad8309b596b342613cf07635439836f764c42c5226413af6c51ad3a77c
+size 14026613
diff --git a/openscap.changes b/openscap.changes
index dbffd1b..3584f53 100644
--- a/openscap.changes
+++ b/openscap.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Wed Jun 21 07:32:35 UTC 2023 - Robert Frohl <rfrohl@suse.com>
+
+- openscap 1.3.8
+  * New features
+    - The boot-time remediation service for systemd's Offline Update mode is now disabled by default
+    - Add offline capabilities to the shadow OVAL probe
+    - Add offline capabilities to the sysctl OVAL probe
+    - Add 'auristorfs' to list of network fileystems
+    - Add new experimental linux-bound fwupdsecattr probe for system firmware security attributes (fwupd-based)
+  * Maintenance, bug fix
+    - Use ListUnitFiles D-Bus method to fetch all units in systemd OVAL probe
+    - Fix minor resource leaks
+
 -------------------------------------------------------------------
 Wed Mar 29 15:22:55 UTC 2023 - Marcus Meissner <meissner@suse.com>
 
diff --git a/openscap.spec b/openscap.spec
index a8ba77e..279839a 100644
--- a/openscap.spec
+++ b/openscap.spec
@@ -23,7 +23,7 @@
   %define _fillupdir %{_localstatedir}/adm/fillup-templates
 %endif
 Name:           openscap
-Version:        1.3.7
+Version:        1.3.8
 Release:        0
 Summary:        A Set of Libraries for Integration with SCAP
 License:        LGPL-2.1-or-later
@@ -185,9 +185,9 @@ This package contains the Script Checking Engine Library (SCE) for OpenSCAP.
 
 %build
 %if 0%{?with_bindings}
-%cmake -DENABLE_DOCS=TRUE -DCMAKE_SHARED_LINKER_FLAGS=""
+%cmake -DENABLE_DOCS=TRUE -DCMAKE_SHARED_LINKER_FLAGS="" -DENABLE_OSCAP_REMEDIATE_SERVICE=TRUE
 %else
-%cmake -DENABLE_DOCS=TRUE -DENABLE_PYTHON3=FALSE -DENABLE_PERL=FALSE -DCMAKE_SHARED_LINKER_FLAGS=""
+%cmake -DENABLE_DOCS=TRUE -DENABLE_PYTHON3=FALSE -DENABLE_PERL=FALSE -DCMAKE_SHARED_LINKER_FLAGS="" -DENABLE_OSCAP_REMEDIATE_SERVICE=TRUE
 %endif
 %if 0%{?sle_version} > 150100 || 0%{?suse_version} == 1599
 %cmake_build
@@ -231,6 +231,8 @@ mv %{buildroot}%{_sysconfdir}/bash_completion.d/* %{buildroot}%{_datadir}/bash-c
 ln -s  %{_datadir}/openscap/scap-yast2sec-oval.xml %{buildroot}/%{_datadir}/openscap/scap-oval.xml
 ln -s  %{_datadir}/openscap/scap-yast2sec-xccdf.xml %{buildroot}/%{_datadir}/openscap/scap-xccdf.xml
 
+# for some reason the serivce file is put under /usr/usr/lib/systemd..
+mv %{buildroot}/usr/%{_unitdir}/oscap-remediate.service %{buildroot}/%{_unitdir}
 # oscap-remediate should be in /usr/libexec but this is not well supported in
 # older versions of the distro
 %if 0%{?suse_version} != 1599