diff --git a/.gitignore b/.gitignore
index a140e02..9f1a217 100644
--- a/.gitignore
+++ b/.gitignore
@@ -79,3 +79,4 @@ pigeonhole-snap0592366457df.tar.bz2
 /dovecot-2.2.10.tar.gz
 /dovecot-2.2.11.tar.gz
 /dovecot-2.2.12.tar.gz
+/dovecot-2.2.13.tar.gz
diff --git a/dovecot.spec b/dovecot.spec
index a258f47..e61ef68 100644
--- a/dovecot.spec
+++ b/dovecot.spec
@@ -3,9 +3,9 @@
 Summary: Secure imap and pop3 server
 Name: dovecot
 Epoch: 1
-Version: 2.2.12
+Version: 2.2.13
 %global prever %{nil}
-Release: 2%{?dist}
+Release: 1%{?dist}
 #dovecot itself is MIT, a few sources are PD, pigeonhole is LGPLv2
 License: MIT and LGPLv2
 Group: System Environment/Daemons
@@ -485,6 +485,19 @@ make check
 %{_libdir}/%{name}/dict/libdriver_pgsql.so
 
 %changelog
+* Mon May 12 2014 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.13-1
+- dovecot updated to 2.2.13
+- fixes CVE-2014-3430: denial of service through maxxing out SSL connections
+- pop3 server was still crashing in v2.2.12 
+- maildir: Various fixes and improvements to handling compressed mails
+- fts-lucene, fts-solr: Fixed crash on search when the index contained
+  duplicate entries.
+- mail_attachment_dir: Attachments with the last base64-encoded line
+  longer than the rest wasn't handled correctly.
+- IMAP: SEARCH/SORT PARTIAL was handled completely wrong in v2.2.11+
+- acl: Global ACL file handling was broken when multiple entries
+  matched the mailbox name
+
 * Sun Mar 30 2014 John Morris <john@zultron.com> - 1:2.2.12-2
 - el6 build fixes (#1082384):
 - el6 autoconf too old to regen; use packaged files
diff --git a/sources b/sources
index c2d78b3..769d9a4 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-25395269fa2e0525e2d144d71d0450eb  dovecot-2.2.12.tar.gz
+a3eb1c0b1822c4f2b0fe9247776baa71  dovecot-2.2.13.tar.gz
 e8cb4976db9811d37e9d870f2f75ffef  dovecot-2.2-pigeonhole-0.4.2.tar.gz