diff --git a/.gitignore b/.gitignore
index f886048..d000977 100644
--- a/.gitignore
+++ b/.gitignore
@@ -36,3 +36,4 @@ clog
 /php-phpseclib-2.0.36-a975471.tgz
 /php-phpseclib-2.0.37-c812fbb.tgz
 /php-phpseclib-2.0.38-b035365.tgz
+/php-phpseclib-2.0.39-f3a0e2b.tgz
diff --git a/php-phpseclib.spec b/php-phpseclib.spec
index 1b09c73..716b70d 100644
--- a/php-phpseclib.spec
+++ b/php-phpseclib.spec
@@ -3,12 +3,12 @@
 
 %global github_owner            phpseclib
 %global github_name             phpseclib
-%global github_commit           b03536539f43a4f9aa33c4f0b2f3a1c752088fcd
+%global github_commit           f3a0e2b715c40cf1fd270d444901b63311725d63
 %global github_short            %(c=%{github_commit}; echo ${c:0:7})
 %bcond_without                  tests
 
 Name:       php-%{composer_vendor}
-Version:    2.0.38
+Version:    2.0.39
 Release:    1%{?dist}
 Summary:    PHP Secure Communications Library
 License:    MIT
@@ -131,6 +131,9 @@ exit $ret
 
 
 %changelog
+* Mon Oct 24 2022 Remi Collet <remi@remirepo.net> - 2.0.39-1
+- update to 2.0.39
+
 * Mon Sep 12 2022 Remi Collet <remi@remirepo.net> - 2.0.38-1
 - update to 2.0.38
 
diff --git a/sources b/sources
index 9211947..382460a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (php-phpseclib-2.0.38-b035365.tgz) = 4b08a452481d99bc2a15c3fc509e345a6d186bb555bc34776c494de46c6fdc3682cf35850d8f5b5a6eb4ebbd743a4515781c73dc6061091f5cb7874d736f7762
+SHA512 (php-phpseclib-2.0.39-f3a0e2b.tgz) = 423de695e328670742918ac6b036807f649a31e61c436640836b443f0f18fd659e31f53a60221d580b97f5882c9d8f9148b2f0579b046b0fa9fd010059b31f0c