diff --git a/phpMyAdmin-4.2.13-all-languages.tar.bz2 b/phpMyAdmin-4.2.13-all-languages.tar.bz2
deleted file mode 100644
index 0f408c9..0000000
--- a/phpMyAdmin-4.2.13-all-languages.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:70200a83422cbbdd5d44c13b01aa70d0926e2cfdbf5f98dd59cf53f0b12499ab
-size 6988773
diff --git a/phpMyAdmin-4.2.13.1-all-languages.tar.bz2 b/phpMyAdmin-4.2.13.1-all-languages.tar.bz2
new file mode 100644
index 0000000..02db07f
--- /dev/null
+++ b/phpMyAdmin-4.2.13.1-all-languages.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:54b18343b8cd2d69716ad09e49c380f19fc92d9f88378a0f4aba15eb4a33bc17
+size 6989658
diff --git a/phpMyAdmin.changes b/phpMyAdmin.changes
index cdd6c45..b2d6997 100644
--- a/phpMyAdmin.changes
+++ b/phpMyAdmin.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Wed Dec  3 17:14:16 UTC 2014 - ecsos@opensuse.org
+
+- update to 4.2.13.1 (2014-12-03)
+  This update fixes several vulnerabilities
+- Security fixes:
+  * PMASA-2014-18 (CVE-2014-9219, CWE-661 CWE-79) [boo#908364]
+    http://www.phpmyadmin.net/home_page/security/PMASA-2014-18.php
+    - sf#4612 [security] XSS vulnerability in redirection mechanism
+  * PMASA-2014-17 (CVE-2014-9218, CWE-661 CWE-400) [boo#908363]
+    http://www.phpmyadmin.net/home_page/security/PMASA-2014-17.php
+    - sf#4611 [security] DOS attack with long passwords
+
 -------------------------------------------------------------------
 Sun Nov 30 22:47:22 UTC 2014 - ecsos@opensuse.org
 
diff --git a/phpMyAdmin.spec b/phpMyAdmin.spec
index ba709b4..4727919 100644
--- a/phpMyAdmin.spec
+++ b/phpMyAdmin.spec
@@ -34,7 +34,7 @@ Name:           phpMyAdmin
 Summary:        Administration of MySQL over the web
 License:        GPL-2.0+
 Group:          Productivity/Networking/Web/Frontends
-Version:        4.2.13
+Version:        4.2.13.1
 Release:        0
 Url:            http://www.phpMyAdmin.net
 Source0:        http://sourceforge.net/projects/phpmyadmin/files/%{name}-%{version}-all-languages.tar.bz2