diff --git a/.gitignore b/.gitignore
index c1eaf85..3c38372 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,3 +20,4 @@ nsd-3.2.6.tar.gz
 /nsd-3.2.9.tar.gz
 /nsd-3.2.11rc1.tar.gz
 /nsd-3.2.12.tar.gz
+/nsd-3.2.13.tar.gz
diff --git a/nsd.spec b/nsd.spec
index 0c9918e..e76a2f2 100644
--- a/nsd.spec
+++ b/nsd.spec
@@ -1,7 +1,7 @@
 Summary: Fast and lean authoritative DNS Name Server
 Name: nsd
-Version: 3.2.12
-Release: 2%{?dist}
+Version: 3.2.13
+Release: 1%{?dist}
 License: BSD
 Url: http://www.nlnetlabs.nl/%{name}/
 Source: http://www.nlnetlabs.nl/downloads/%{name}/%{name}-%{version}.tar.gz
@@ -119,6 +119,10 @@ fi
 
 
 %changelog
+* Fri Jul 27 2012 Paul Wouters <pwouters@redhat.com> - 3.2.12-1
+- Updated to 3.2.13, addresses VU#517036 CVE-2012-2979
+  (note Fedora/EPEL packages are not vulnerable to this)
+
 * Mon Jul 23 2012 Paul Wouters <pwouters@redhat.com> - 3.2.12-2
 - Add /var/run/nsd via tmpfiles (rhbz#842021)
 
diff --git a/sources b/sources
index ac6fd1b..c3106c7 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,3 @@
 707eabf8a32b1c53d28ccaef2cd45163  nsd-3.2.11.tar.gz
 19f12299b624819cd770eab84f177989  nsd-3.2.12.tar.gz
+b6494ffadf4ce72ff367a7c3f00498c1  nsd-3.2.13.tar.gz