diff --git a/Formula/tomcat@8.rb b/Formula/tomcat@8.rb
index e30af710cc..d2db490b98 100644
--- a/Formula/tomcat@8.rb
+++ b/Formula/tomcat@8.rb
@@ -1,9 +1,9 @@
 class TomcatAT8 < Formula
   desc "Implementation of Java Servlet and JavaServer Pages"
   homepage "https://tomcat.apache.org/"
-  url "https://www.apache.org/dyn/closer.cgi?path=tomcat/tomcat-8/v8.5.37/bin/apache-tomcat-8.5.37.tar.gz"
-  mirror "https://archive.apache.org/dist/tomcat/tomcat-8/v8.5.37/bin/apache-tomcat-8.5.37.tar.gz"
-  sha256 "b636fa3a662bbf556774368da62dd620fa5bf0da2045785d274d1766bfb32bb1"
+  url "https://www.apache.org/dyn/closer.cgi?path=tomcat/tomcat-8/v8.5.38/bin/apache-tomcat-8.5.38.tar.gz"
+  mirror "https://archive.apache.org/dist/tomcat/tomcat-8/v8.5.38/bin/apache-tomcat-8.5.38.tar.gz"
+  sha256 "e6c8c4fd2880391c9cd699ff5e1362d73b466642a8e033c6ae3d2bca7d4f8877"
 
   bottle :unneeded