diff --git a/.hgtags b/.hgtags
--- a/.hgtags
+++ b/.hgtags
@@ -43,3 +43,4 @@ 6d531c0b068c6eda62dddceedc9f845ecb6feb6f
 3d6bf2d81b1564830eb5e83396110d2a9a93eb1e v4.13.0
 5468fc89e708bd90e413cd0d54350017abbdbc0e v4.13.1
 610d621550521c314ee97b3d43473ac0bcf06fb8 v4.13.2
+7dc62c090881fb5d03268141e71e0940d7c3295d v4.13.3
diff --git a/docs/release-notes/release-notes-4.13.1.rst b/docs/release-notes/release-notes-4.13.1.rst
--- a/docs/release-notes/release-notes-4.13.1.rst
+++ b/docs/release-notes/release-notes-4.13.1.rst
@@ -4,7 +4,7 @@
 Release Date
 ^^^^^^^^^^^^
 
-- 2018-08-06
+- 2018-09-06
 
 
 New Features
diff --git a/docs/release-notes/release-notes-4.13.2.rst b/docs/release-notes/release-notes-4.13.2.rst
--- a/docs/release-notes/release-notes-4.13.2.rst
+++ b/docs/release-notes/release-notes-4.13.2.rst
@@ -4,7 +4,7 @@
 Release Date
 ^^^^^^^^^^^^
 
-- 2018-08-18
+- 2018-09-18
 
 
 New Features
diff --git a/docs/release-notes/release-notes-4.13.3.rst b/docs/release-notes/release-notes-4.13.3.rst
new file mode 100644
--- /dev/null
+++ b/docs/release-notes/release-notes-4.13.3.rst
@@ -0,0 +1,56 @@
+|RCE| 4.13.3 |RNS|
+------------------
+
+Release Date
+^^^^^^^^^^^^
+
+- 2018-10-09
+
+
+New Features
+^^^^^^^^^^^^
+
+
+
+General
+^^^^^^^
+
+- VCS: use a real two user First Last name for merge operation.
+  This allows certain user naming checks to pass and be validated correctly.
+
+
+Security
+^^^^^^^^
+
+- GIT: bumped release to 2.17.2 which addresses cve-2018-17456.
+
+
+Performance
+^^^^^^^^^^^
+
+
+
+Fixes
+^^^^^
+
+- Repository import: skip validating root storage path in detection of VCS types.
+  This check doesn't need to be visible in logs and by that it will reduce the
+  number of errors in logs significantly.
+- VCS: Properly handle VCS traffic from web app routes and API.
+  Before accessing those via any VCS produced a 500 error.
+- Users: when deleting users ensure we also properly clear personal flag so we
+  don't have multiple personal groups which is produces 500 errors.
+- Users: in case of multiple personal groups, return the first instead of an error.
+- Webhook: handle ${commit_id} variable independent from ${branch}.
+- Hooks: handle errors before trying to fetch the output. This allows easier debugging
+  of hook related problems
+- Dependencies: Backported a patch from Dulwich to handle GIT references that are
+  directories. Such references should be skipped, but before made repository show
+  500 errors.
+
+
+Upgrade notes
+^^^^^^^^^^^^^
+
+- Scheduled release addressing reported problems, and GIT security vulnerability.
+
diff --git a/docs/release-notes/release-notes.rst b/docs/release-notes/release-notes.rst
--- a/docs/release-notes/release-notes.rst
+++ b/docs/release-notes/release-notes.rst
@@ -9,6 +9,7 @@ Release Notes
 .. toctree::
    :maxdepth: 1
 
+   release-notes-4.13.3.rst
    release-notes-4.13.2.rst
    release-notes-4.13.1.rst
    release-notes-4.13.0.rst