diff --git a/nbdkit.spec b/nbdkit.spec
index faaf727..052c310 100644
--- a/nbdkit.spec
+++ b/nbdkit.spec
@@ -27,7 +27,7 @@
 %global source_directory 1.13-development
 
 Name:           nbdkit
-Version:        1.13.0
+Version:        1.13.1
 Release:        1%{?dist}
 Summary:        NBD server
 
@@ -799,7 +799,7 @@ make %{?_smp_mflags} check || {
 
 
 %files devel
-%doc OTHER_PLUGINS README TODO
+%doc BENCHMARKING OTHER_PLUGINS README SECURITY TODO
 %license LICENSE
 # Include the source of the example plugins in the documentation.
 %doc plugins/example*/*.c
@@ -825,6 +825,11 @@ make %{?_smp_mflags} check || {
 
 
 %changelog
+* Tue Apr 23 2019 Richard W.M. Jones <rjones@redhat.com> - 1.13.1-1
+- New upstream version 1.13.1.
+- Distribute BENCHMARKING and SECURITY files.
+- Includes a fix for possible remote memory heap leak with user plugins.
+
 * Sat Apr 13 2019 Richard W.M. Jones <rjones@redhat.com> - 1.13.0-1
 - New upstream version 1.13.0.
 - Add stats filter.
diff --git a/sources b/sources
index ac11ed3..a3ab73c 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (nbdkit-1.13.0.tar.gz) = 3e4957aff0109b2e24826fd79b8112553393ec88e738b8665f6a93fe4a608371073a3f375182c3835a984e9e3cb4ebaf7b5bc2296c6774eb96ca5c294292ed31
-SHA512 (nbdkit-1.13.0.tar.gz.sig) = c396a3ecb0dc2e1154305bcf65d422d5036c708296b137b6be4b3a42bcc2c2463cf3886a6983674edc9a4796a3dea744f9eaeb4f9523500280d4718f8027b6d7
+SHA512 (nbdkit-1.13.1.tar.gz) = 7e5d46518a9dcaf429154e4b7a6fae85937544eb69dff6b637b99025bb0248aec39947c1196305d4dc99cb743cc59f0d6003caa3d28be2d09c35c28a6348a149
+SHA512 (nbdkit-1.13.1.tar.gz.sig) = 7ff2b53dfb86d8b55f720ae80e2c07f3696e23a32fc81ecc73380f590b7c7e67c97cb255da0a2d0f421e982e9228eaf2eb1345aacb52eb35d73c237d238774ec