diff --git a/.gitignore b/.gitignore
index f8909fa..0996c3c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,5 @@ gnupg-1.4.10.tar.bz2.sig
 /gnupg-1.4.11.tar.bz2.sig
 /gnupg-1.4.12.tar.bz2
 /gnupg-1.4.12.tar.bz2.sig
+/gnupg-1.4.13.tar.bz2
+/gnupg-1.4.13.tar.bz2.sig
diff --git a/gnupg.spec b/gnupg.spec
index 23d6594..5eacb6d 100644
--- a/gnupg.spec
+++ b/gnupg.spec
@@ -1,7 +1,7 @@
 Summary: A GNU utility for secure communication and data storage
 Name: gnupg
-Version: 1.4.12
-Release: 2%{?dist}
+Version: 1.4.13
+Release: 1%{?dist}
 License: GPLv3+ with exceptions
 Group: Applications/System
 Source0: ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-%{version}.tar.bz2
@@ -113,6 +113,10 @@ exit 0
 %{_mandir}/man7/gnupg.7.gz
 
 %changelog
+* Wed Jan 02 2013 Brian C. Lane <bcl@redhat.com> 1.4.13-1
+- New upstream v1.4.13
+  fixes for CVE-2012-6085 (#891142)
+
 * Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.12-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
 
diff --git a/sources b/sources
index 70e2a26..7710a40 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-ce3742e5c7912559cab7894ad8ba7f6b  gnupg-1.4.12.tar.bz2
-fc1d196fe7cd5a3a0a3f12e654d32a0c  gnupg-1.4.12.tar.bz2.sig
+c74249db5803f76f17fee9a201c0189f  gnupg-1.4.13.tar.bz2
+ea1650cbe6f18f8600f507329d263c27  gnupg-1.4.13.tar.bz2.sig