diff --git a/libpq.spec b/libpq.spec
index f343258e9b6a605e0ea8d289cefd1f61f3479087..60a71221900843633ce1869e3a60841cd35bbbf8 100644
--- a/libpq.spec
+++ b/libpq.spec
@@ -1,6 +1,6 @@
 Name: libpq
-Version: 13.12
-Release: 2
+Version: 13.13
+Release: 1
 Summary: PostgreSQL client library
 License: PostgreSQL
 Url: http://www.postgresql.org/
@@ -81,6 +81,9 @@ cat pg_config-13.lang >>libpq-devel.lst
 %_libdir/pkgconfig/libpq.pc
 
 %changelog
+* Mon Nov 20 2023 dillon chen<dillon.chen@gmail.com> - 13.13-1
+- upgrade libpq to 13.13, fix CVE-2023-5868/5869/5870
+
 * Mon Sep 25 2023 panchenbo <panchenbo@kylinsec.com.cn> - 13.12-2
 - add loongarch64 sw_64 support
 
diff --git a/postgresql-13.12.tar.bz2 b/postgresql-13.13.tar.bz2
similarity index 69%
rename from postgresql-13.12.tar.bz2
rename to postgresql-13.13.tar.bz2
index 46ad4624eb8759a2834d5728ab15641b47dbcb93..f87ad2b6150cddd2f9ddca7883a2fe6f2d7a351c 100644
Binary files a/postgresql-13.12.tar.bz2 and b/postgresql-13.13.tar.bz2 differ