diff --git a/.gitignore b/.gitignore
index d490858..6e34bd3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,3 +20,4 @@
 /mosquitto-1.4.10.tar.gz
 /mosquitto-1.4.11.tar.gz
 /mosquitto-1.4.12.tar.gz
+/mosquitto-1.4.13.tar.gz
diff --git a/mosquitto.spec b/mosquitto.spec
index 8165439..7851d1a 100644
--- a/mosquitto.spec
+++ b/mosquitto.spec
@@ -1,6 +1,6 @@
 Name:           mosquitto
-Version:        1.4.12
-Release:        2%{?dist}
+Version:        1.4.13
+Release:        1%{?dist}
 Summary:        An Open Source MQTT v3.1/v3.1.1 Broker
 
 License:        BSD
@@ -114,6 +114,10 @@ exit 0
 %{_mandir}/man3/*.3.*
 
 %changelog
+* Sat Jul 01 2017 Fabian Affolter <mail@fabian-affolter.ch> - 1.4.13-1
+- Fix CVE-2017-9868 (rhbz#1464946)
+- Update to new upstream version 1.4.13
+
 * Sun Jun 18 2017 Fabian Affolter <mail@fabian-affolter.ch> - 1.4.12-2
 - Rebuild for libwebsockets
 
diff --git a/sources b/sources
index 78380d5..2ee5164 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (mosquitto-1.4.12.tar.gz) = 75e6105498869ab13265df7a0bea6052c014d59d0c0efb61162d8257d34c0153fce32130e84c28e99fd494f374949aac5e01c19f7439c2eea575b52ef1179c3c
+SHA512 (mosquitto-1.4.13.tar.gz) = 56692caa389f7d7ca3437ba202cf03fd4602440706b3f55635dce164fca49e52b7e0b2c9b019aaf4744abfa638d02b940c2c018e8724d1850674f0571fc3e32b