diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000000000000000000000000000000000000..9b7c16d48bd159875d83e4763fc63b46ce1bd58f
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+*.bz2 filter=lfs diff=lfs merge=lfs -text
diff --git a/.lfsconfig b/.lfsconfig
new file mode 100644
index 0000000000000000000000000000000000000000..98643f98766fa0c4ba780d024e51923fcccff6a9
--- /dev/null
+++ b/.lfsconfig
@@ -0,0 +1,2 @@
+[lfs]
+	url = https://artlfs.openeuler.openatom.cn/src-openEuler/libpq
diff --git a/libpq.spec b/libpq.spec
index 2e5cf88f3726c71c5840a4f4e00ceecde6c671ec..b3c70fedac3a62d14af43b8deebef38a7c385f5d 100644
--- a/libpq.spec
+++ b/libpq.spec
@@ -1,5 +1,5 @@
 Name: libpq
-Version: 13.17
+Version: 13.20
 Release: 1
 Summary: PostgreSQL client library
 License: PostgreSQL
@@ -81,6 +81,9 @@ cat pg_config-13.lang >>libpq-devel.lst
 %_libdir/pkgconfig/libpq.pc
 
 %changelog
+* Thu Feb 20 2025 Funda Wang <fundawang@yeah.net> - 13.20-1
+- update to 13.20 to fix CVE-2025-1094
+
 * Fri Nov 15 2024 Funda Wang <fundawang@yeah.net> - 13.17-1
 - update to 13.17
 
diff --git a/postgresql-13.17.tar.bz2 b/postgresql-13.17.tar.bz2
deleted file mode 100644
index b725175b84bc532a9e17703508ffec316caf1455..0000000000000000000000000000000000000000
Binary files a/postgresql-13.17.tar.bz2 and /dev/null differ
diff --git a/postgresql-13.20.tar.bz2 b/postgresql-13.20.tar.bz2
new file mode 100644
index 0000000000000000000000000000000000000000..7dc2653fc705449a3428d0038e0e4350e8fcf7a9
--- /dev/null
+++ b/postgresql-13.20.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8134b685724d15e60d93bea206fbe0f14c8295e84f1cc91d5a3928163e4fb288
+size 21730844