diff --git a/.gitignore b/.gitignore
index d3cdfb0..9adab18 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
-SOURCES/Archive_Tar-1.4.12.tgz
+SOURCES/Archive_Tar-1.4.14.tgz
 SOURCES/Console_Getopt-1.4.3.tgz
-SOURCES/PEAR-1.10.12.tgz
+SOURCES/PEAR-1.10.13.tgz
 SOURCES/PEAR_Manpages-1.10.0.tgz
 SOURCES/Structures_Graph-1.1.1.tgz
 SOURCES/XML_Util-1.4.5.tgz
diff --git a/.php-pear.metadata b/.php-pear.metadata
index 894b27e..a5a888d 100644
--- a/.php-pear.metadata
+++ b/.php-pear.metadata
@@ -1,6 +1,6 @@
-0faf2c408633a129a557e9f584545bdc840de9a7 SOURCES/Archive_Tar-1.4.12.tgz
+ef023e94c632e80ef78ddfee19e4af6abc54eed4 SOURCES/Archive_Tar-1.4.14.tgz
 88b7bfce2f71cd99b922fa5eff5247bd754a3bc1 SOURCES/Console_Getopt-1.4.3.tgz
-6cb4908590eb25ccfa706461fe3eb3faf7ff6f5d SOURCES/PEAR-1.10.12.tgz
+f1ea5eae354f7a302c62edaa06d8b057de1b8be5 SOURCES/PEAR-1.10.13.tgz
 50e7d88cafe27d02389b351ec4633a1219bf3603 SOURCES/PEAR_Manpages-1.10.0.tgz
 2a9e5999e035aa3a6789011238b0a9a54806124a SOURCES/Structures_Graph-1.1.1.tgz
 c9fe1448ae7af4522f2cdfd741e14b1ef3998309 SOURCES/XML_Util-1.4.5.tgz
diff --git a/SPECS/php-pear.spec b/SPECS/php-pear.spec
index 193c1ce..1d64dfe 100644
--- a/SPECS/php-pear.spec
+++ b/SPECS/php-pear.spec
@@ -9,7 +9,7 @@
 %global metadir %{_localstatedir}/lib/pear
 
 %global getoptver 1.4.3
-%global arctarver 1.4.12
+%global arctarver 1.4.14
 # https://pear.php.net/bugs/bug.php?id=19367
 # Structures_Graph 1.0.4 - incorrect FSF address
 %global structver 1.1.1
@@ -26,8 +26,8 @@
 
 Summary: PHP Extension and Application Repository framework
 Name: php-pear
-Version: 1.10.12
-Release: 9%{?dist}
+Version: 1.10.13
+Release: 1%{?dist}
 Epoch: 1
 # PEAR, PEAR_Manpages, Archive_Tar, XML_Util, Console_Getopt are BSD
 # Structures_Graph is LGPLv3+
@@ -104,7 +104,7 @@ Requires:  php-bz2
 # for /var/www/html ownership
 Requires: httpd-filesystem
 %if 0%{?fedora}
-Requires: php-composer(fedora/autoloader)
+Recommends: php-composer(fedora/autoloader)
 %endif
 
 
@@ -332,6 +332,10 @@ fi
 
 
 %changelog
+* Tue Dec 14 2021 Remi Collet <rcollet@redhat.com> - 1:1.10.13-1
+- update PEAR to 1.10.13 #2032448
+- update Archive_Tar to 1.4.14
+
 * Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1:1.10.12-9
 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
   Related: rhbz#1991688