diff --git a/config/rootfiles/common/gnutls b/config/rootfiles/common/gnutls
index 52c3b6764..c02780dfb 100644
--- a/config/rootfiles/common/gnutls
+++ b/config/rootfiles/common/gnutls
@@ -13,6 +13,7 @@ usr/bin/psktool
 #usr/include/gnutls/dtls.h
 #usr/include/gnutls/gnutls.h
 #usr/include/gnutls/gnutlsxx.h
+#usr/include/gnutls/hpke.h
 #usr/include/gnutls/ocsp.h
 #usr/include/gnutls/openpgp.h
 #usr/include/gnutls/pkcs11.h
@@ -32,7 +33,7 @@ usr/lib/libgnutls-dane.so.0.4.1
 #usr/lib/libgnutls.la
 #usr/lib/libgnutls.so
 usr/lib/libgnutls.so.30
-usr/lib/libgnutls.so.30.41.0
+usr/lib/libgnutls.so.30.42.0
 #usr/lib/libgnutlsxx.la
 #usr/lib/libgnutlsxx.so
 usr/lib/libgnutlsxx.so.30
@@ -395,6 +396,14 @@ usr/lib/libgnutlsxx.so.30.0.0
 #usr/share/man/man3/gnutls_hmac_init.3
 #usr/share/man/man3/gnutls_hmac_output.3
 #usr/share/man/man3/gnutls_hmac_set_nonce.3
+#usr/share/man/man3/gnutls_hpke_decap.3
+#usr/share/man/man3/gnutls_hpke_deinit.3
+#usr/share/man/man3/gnutls_hpke_derive_keypair.3
+#usr/share/man/man3/gnutls_hpke_encap.3
+#usr/share/man/man3/gnutls_hpke_export.3
+#usr/share/man/man3/gnutls_hpke_init.3
+#usr/share/man/man3/gnutls_hpke_open.3
+#usr/share/man/man3/gnutls_hpke_seal.3
 #usr/share/man/man3/gnutls_idna_map.3
 #usr/share/man/man3/gnutls_idna_reverse_map.3
 #usr/share/man/man3/gnutls_init.3
@@ -514,6 +523,7 @@ usr/lib/libgnutlsxx.so.30.0.0
 #usr/share/man/man3/gnutls_pkcs11_obj_get_exts.3
 #usr/share/man/man3/gnutls_pkcs11_obj_get_flags.3
 #usr/share/man/man3/gnutls_pkcs11_obj_get_info.3
+#usr/share/man/man3/gnutls_pkcs11_obj_get_pk_algorithm.3
 #usr/share/man/man3/gnutls_pkcs11_obj_get_ptr.3
 #usr/share/man/man3/gnutls_pkcs11_obj_get_type.3
 #usr/share/man/man3/gnutls_pkcs11_obj_import_url.3
diff --git a/lfs/gnutls b/lfs/gnutls
index c869100ba..ac2afb361 100644
--- a/lfs/gnutls
+++ b/lfs/gnutls
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.8.11
+VER        = 3.8.13
 
 THISAPP    = gnutls-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 54ec3fb396187294ae59c65fa92a515175d8ab19d9f5656569b372b5764b3090724aaa8cedd9467b530f2c74e86a6bfd956d3bd9439a7b69656dcc24e303cbe6
+$(DL_FILE)_BLAKE2 = 80677a45a7c6f892287020e3e6b0add2432f2c64a4c9a649ce889921ac65b44931504ad0682ccc12e4b6d8f94c1a72e35c50673c9d04bd4e327063b812339380
 
 install : $(TARGET)
 
@@ -70,11 +70,10 @@ $(subst %,%_BLAKE2,$(objects)) :
 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
-	cd $(DIR_APP) && \
-		./configure \
-			--prefix=/usr \
-			--without-p11-kit \
-			--disable-openssl-compatibility
+	cd $(DIR_APP) && ./configure \
+					--prefix=/usr \
+					--without-p11-kit \
+					--disable-openssl-compatibility
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	@rm -rf $(DIR_APP)