diff --git a/main/ruby/APKBUILD b/main/ruby/APKBUILD
index 8e9c55ce1b547a5f6d8a3144cce82792bf9fde0f..4ea08417103963ce307dfc472b9dad2e14d3f088 100644
--- a/main/ruby/APKBUILD
+++ b/main/ruby/APKBUILD
@@ -2,6 +2,9 @@
 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 #
 # secfixes:
+#   2.3.8-r0:
+#     - CVE-2018-16395
+#     - CVE-2018-16396
 #   2.3.7-r0:
 #     - CVE-2017-17742
 #     - CVE-2018-6914
@@ -22,7 +25,7 @@
 #     - CVE-2017-17405
 #
 pkgname=ruby
-pkgver=2.3.7
+pkgver=2.3.8
 _abiver=2.3.0
 pkgrel=0
 pkgdesc="An object-oriented language for quick and easy programming"
@@ -39,7 +42,7 @@ subpackages="$pkgname-doc $pkgname-dev $pkgname-irb::noarch
 	$pkgname-io-console:io_console $pkgname-minitest::noarch
 	$pkgname-json $pkgname-libs
 	"
-source="ftp://ftp.ruby-lang.org/pub/ruby/${pkgver%.*}/$pkgname-$pkgver.tar.bz2"
+source="https://cache.ruby-lang.org/pub/$pkgname/${pkgver%.*}/$pkgname-$pkgver.tar.gz"
 options="!fhs"
 replaces="ruby-gems"
 builddir="$srcdir/$pkgname-$pkgver"
@@ -194,6 +197,6 @@ _mvgem() {
 	done
 }
 
-md5sums="5eb580d5cd13ffb5aacfb96580c0043d  ruby-2.3.7.tar.bz2"
-sha256sums="18b12fafaf37d5f6c7139c1b445355aec76baa625a40300598a6c8597fc04d8e  ruby-2.3.7.tar.bz2"
-sha512sums="e72754f7703f0706c4b0bccd053035536053451fe069a55427984cc0bc5692b86bd51c243c5f62f78527c66b08300d2e4aa19b73e6ded13d6020aa2450e66a7d  ruby-2.3.7.tar.bz2"
+md5sums="9475756a8fcc1d94416efa2b4701d473  ruby-2.3.8.tar.gz"
+sha256sums="b5016d61440e939045d4e22979e04708ed6c8e1c52e7edb2553cf40b73c59abf  ruby-2.3.8.tar.gz"
+sha512sums="43b02f2f9de6baf281f09a49fd07367127b4de1fb14473380d06bfa7667990d8f722ae2d33cf7d15b02f7e799515f21aebd308897c4c2a5461ebab4049d6c7ef  ruby-2.3.8.tar.gz"