diff --git a/perl-5.38.0.tar.xz b/perl-5.38.0.tar.xz
deleted file mode 100644
index 206aa3a..0000000
--- a/perl-5.38.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:eca551caec3bc549a4e590c0015003790bdd1a604ffe19cc78ee631d51f7072e
-size 13565448
diff --git a/perl-5.38.2.tar.xz b/perl-5.38.2.tar.xz
new file mode 100644
index 0000000..b6a8799
--- /dev/null
+++ b/perl-5.38.2.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d91115e90b896520e83d4de6b52f8254ef2b70a8d545ffab33200ea9f1cf29e8
+size 13679524
diff --git a/perl.changes b/perl.changes
index 3b4c8a6..69f1697 100644
--- a/perl.changes
+++ b/perl.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Mon Nov 27 10:50:24 CET 2023 - mls@suse.de
+
+- Update to perl 5.38.2
+  * fixes [CVE-2023-47038] Write past buffer end via illegal
+    user-defined Unicode property [bnc#1217084]
+  * fixes [CVE-2023-47039] Perl for Windows binary hijacking
+    vulnerability [bnc#1217085]
+
 -------------------------------------------------------------------
 Thu Sep 21 10:51:15 UTC 2023 - Neal Gompa <ngompa@opensuse.org>
 
diff --git a/perl.spec b/perl.spec
index 699e232..be151b3 100644
--- a/perl.spec
+++ b/perl.spec
@@ -23,11 +23,11 @@
 %define name_suffix %{nil}
 %endif
 
-%define pversion 5.38.0
+%define pversion 5.38.2
 # set to nil when equal to pversion
-%global versionlist %nil
+%global versionlist 5.38.0
 Name:           perl%{?name_suffix}
-Version:        5.38.0
+Version:        5.38.2
 Release:        0
 Summary:        The Perl interpreter
 License:        Artistic-1.0 OR GPL-1.0-or-later