diff --git a/internal/rosa/gnu.go b/internal/rosa/gnu.go
index 526bcb4a..0f5ea834 100644
--- a/internal/rosa/gnu.go
+++ b/internal/rosa/gnu.go
@@ -837,8 +837,8 @@ func init() {
 
 func (t Toolchain) newGnuTLS() (pkg.Artifact, string) {
 	const (
-		version  = "3.8.12"
-		checksum = "VPdP-nRydQQRJcnma-YA7CJYA_kzTJ2rb3QFeP6D27emSyInJ8sQ-Wzn518I38dl"
+		version  = "3.8.13"
+		checksum = "Hr8NaOOFliDJUKxyqbZu8zJS50Ws0EnLpc-ctRUOzMYTdJ9MAw2kCnCDlFzR19sD"
 	)
 
 	var configureExtra []KV