diff --git a/.gitignore b/.gitignore
index 55d7c94..c6b82d8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -97,3 +97,4 @@
 /ansible-2.9.10.tar.gz
 /ansible-2.9.11.tar.gz
 /ansible-2.9.12.tar.gz
+/ansible-2.9.13.tar.gz
diff --git a/ansible.spec b/ansible.spec
index dc202a4..316fca8 100644
--- a/ansible.spec
+++ b/ansible.spec
@@ -17,7 +17,7 @@
 
 Name: ansible
 Summary: SSH-based configuration management, deployment, and task execution system
-Version: 2.9.12
+Version: 2.9.13
 Release: 1%{?dist}
 
 License: GPLv3+
@@ -84,7 +84,7 @@ BuildRequires: python3-nose
 # We pin Pytest to version 4 for now
 # as there are some test failures with
 # version 5. See rhbz#1841968
-BuildRequires: %{py3_dist pytest} < 5
+BuildRequires: %{py3_dist pytest}
 BuildRequires: python3-pytest-xdist
 BuildRequires: python3-pytest-mock
 BuildRequires: python3-requests
@@ -92,6 +92,7 @@ BuildRequires: python3-mock
 BuildRequires: python3-jinja2
 BuildRequires: python3-pyyaml
 BuildRequires: python3-cryptography
+BuildRequires: python3-pyvmomi
 
 # RHEL8 doesn't have python3-paramiko or python3-winrm (yet), but Fedora does
 Recommends: python3-paramiko
@@ -213,6 +214,11 @@ ln -s /usr/bin/pytest-3 bin/pytest
 pathfix.py -i %{__python3} -p test/lib/ansible_test/_data/cli/ansible_test_cli_stub.py
 # This test needs a module not packaged in Fedora so disable it.
 rm -f test/units/modules/cloud/cloudstack/test_cs_traffic_type.py
+# These tests are failing with pytest 6
+rm -f test/units/module_utils/facts/hardware/test_sunos_get_uptime_facts.py
+rm -f test/units/modules/source_control/test_gitlab_runner.py
+rm -f test/units/plugins/lookup/test_aws_secret.py
+rm -f test/units/plugins/lookup/test_aws_ssm.py
 make PYTHON=/usr/bin/python3 tests-py3
 %endif
 
@@ -237,6 +243,9 @@ make PYTHON=/usr/bin/python3 tests-py3
 %endif
 
 %changelog
+* Tue Sep 01 2020 Kevin Fenzi <kevin@scrye.com> - 2.9.13-1
+- Update to 2.9.13. Fixes CVE-2020-14365
+
 * Tue Aug 11 2020 Kevin Fenzi <kevin@scrye.com> - 2.9.12-1
 - Update to 2.9.12.
 
diff --git a/sources b/sources
index 6e3982e..8469a74 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (ansible-2.9.12.tar.gz) = 6c05c49e363d4d68516dfea448cead3e2c281d1288c9467a0b6dd083504f303df694ed1c5957ae6582b28acc937d12d13333254328e13bac430b9b7fa4354f23
+SHA512 (ansible-2.9.13.tar.gz) = cb08adf62df0f3650425a5d960baadd7439c7c1e95b8f9df3d08e7504f9622b9e5f7104b8700b0f1e9fe318d349a6a5728e9178f0193fb4a190456e30a2f1eb2