diff --git a/download b/download
index e4b8417420038e84f3b6c0c91c8e73c9821c5e4f..32b2f89d9ea47ae5c6855d14194c6e6b77728def 100644
--- a/download
+++ b/download
@@ -1,2 +1,2 @@
-3e497037b170fe4be5f462c4964596f2  Python-3.11.11.tar.xz
-629857d6a502450988c9516146864afc  Python-3.11.11.tar.xz.asc
+ec39a8018b9eedf6f0edeb44533bd279  Python-3.11.13.tar.xz
+722052226ade2d639a671e01e82f373a  Python-3.11.13.tar.xz.asc
diff --git a/python3.11.spec b/python3.11.spec
index c52bb29882e5c7e09e221e87fd960b7eaf069955..2dca4fc4866fe82281dddefdaf33b7d0025765c3 100644
--- a/python3.11.spec
+++ b/python3.11.spec
@@ -17,7 +17,7 @@ URL: https://www.python.org/
 
 #  WARNING  When rebasing to a new Python version,
 #           remember to update the python3-docs package as well
-%global general_version %{pybasever}.11
+%global general_version %{pybasever}.13
 #global prerel ...
 %global upstream_version %{general_version}%{?prerel}
 Version: %{general_version}%{?prerel:~%{prerel}}
@@ -71,7 +71,12 @@ License: Python
 %bcond_without optimizations
 
 # Run the test suite in %%check
+# label: fails for i686 for some reason.
+%ifarch %{ix86}
+%bcond_with tests
+%else
 %bcond_without tests
+%endif
 
 # Extra build for debugging the interpreter or C-API extensions
 # (the -debug subpackages)
@@ -1859,10 +1864,15 @@ fi
 # ======================================================
 
 %changelog
-* Fri Dec 13 2024 <rb01097748@alibaba-inc.com> - 3.11.11-1.0.1
+* Wed Jul 16 2025 <rb01097748@alibaba-inc.com> - 3.11.13-1.0.1
 - Rebrand for Anolis OS
 - Support loongarch64 platform
 
+* Wed Jun 04 2025 Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
+- Update to 3.11.13
+- Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
+Resolves: RHEL-98037, RHEL-98006, RHEL-98223, RHEL-98114, RHEL-98200
+
 * Tue Dec 03 2024 Lumír Balhar <lbalhar@redhat.com> - 3.11.11-1
 - Update to 3.11.11
 Resolves: RHEL-64879