diff --git a/.gitignore b/.gitignore
index 5879f27..6159757 100644
--- a/.gitignore
+++ b/.gitignore
@@ -27,3 +27,4 @@ pigeonhole-snap0592366457df.tar.bz2
 /dovecot-2.0.11.tar.gz
 /dovecot-2.0.12.tar.gz
 /dovecot-2.0-pigeonhole-0.2.3.tar.gz
+/dovecot-2.0.13.tar.gz
diff --git a/dovecot.spec b/dovecot.spec
index b2e5dc9..494b3da 100644
--- a/dovecot.spec
+++ b/dovecot.spec
@@ -1,8 +1,8 @@
 Summary: Secure imap and pop3 server
 Name: dovecot
 Epoch: 1
-Version: 2.0.12
-Release: 2%{?dist}
+Version: 2.0.13
+Release: 1%{?dist}
 #dovecot itself is MIT, a few sources are PD, pigeonhole is LGPLv2
 License: MIT and LGPLv2
 Group: System Environment/Daemons
@@ -394,6 +394,14 @@ make check
 %{_libdir}/%{name}/dict/libdriver_pgsql.so
 
 %changelog
+* Thu May 12 2011 Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.13-1
+- dovecot updated to 2.0.13
+- mdbox purge: Fixed wrong warning about corrupted extrefs.
+- script-login binary wasn't actually dropping privileges to the
+  user/group/chroot specified by its service settings.
+- Fixed potential crashes and other problems when parsing header names
+  that contained NUL characters.
+
 * Fri Apr 15 2011 Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-2
 - pigeonhole updated to 0.2.3, which includes:
 - managesieve: fixed bug in UTF-8 checking of string values
diff --git a/sources b/sources
index 9edd824..5c49205 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-689e1a8863d4fb2fd252e1a6121dd181  dovecot-2.0.12.tar.gz
+fd8a0702275a61332db7353dadff0f92  dovecot-2.0.13.tar.gz
 336cbb2073b48119d968fad7de89817a  dovecot-2.0-pigeonhole-0.2.3.tar.gz