diff --git a/postgresql.spec b/postgresql.spec
index 5573a6ff688a8f8049695683a430d655126ebbd9..df3b8671fac564954240b340a82c7fa0c1541fcf 100644
--- a/postgresql.spec
+++ b/postgresql.spec
@@ -44,7 +44,7 @@
 
 Summary:       PostgreSQL client programs
 Name:          postgresql
-Version:       15.12
+Version:       15.13
 Release:       1%{?dist}
 License:       PostgreSQL
 Url:           http://www.postgresql.org/
@@ -1094,6 +1094,9 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
+* Tue May 20 2025 Wang Guodong <gordonwwang@tencent.com> - 15.13-1
+- Upgrade to version 15.13, fix CVE-2025-4207
+
 * Mon Feb 24 2025 Wang Guodong <gordonwwang@tencent.com> - 15.12-1
 - Upgrade to version 15.12, fix CVE-2025-1094
 
diff --git a/sources b/sources
index 4c345be0cfbb9c0a8442980f5825f1d345b96cc6..547fdb3b3c9238e1e61472e3b97320278d10eae1 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (postgresql-15.12.tar.bz2) = 6ccb44cb7ff2133ccb03dfc6b49e26714d9aecb91f4b9d019a8f1e7d0d71ed0bf8101fbbda0185091e4688a557600f020a12306c389e819d731184c17e182717
+SHA512 (postgresql-15.13.tar.bz2) = dd16bc331f6e33cd8ba7a6f19582d4e94d66e4cf4b89b8fe1872f16854401b9f7caf0900478b64a05047d22d2ca07aea5ba71fd5c96fa04bd45713235acdd686
 SHA512 (postgresql-14.16.tar.bz2) = 260b6a6bc42a448f9bb3bf4194f601d2c10de517e39c8437b194662e41aae5013f2921b3712014ada24a274edb0db5f7b9f69d15cbb48d77d36b4c53092c93e4
 SHA512 (postgresql-setup-8.9.tar.gz) = 118e9ebf858722a38b0e90324bc1b49fc7058cda601ca0a7e78c94e7b95e89d6dbbc46f377626364b068614ced3cde3cb4733973ad2d71bf17892ad773657ef7