diff --git a/libvirt.spec b/libvirt.spec
index 1849def..0136c6a 100644
--- a/libvirt.spec
+++ b/libvirt.spec
@@ -340,7 +340,7 @@
 
 Summary: Library providing a simple virtualization API
 Name: libvirt
-Version: 1.0.5.8
+Version: 1.0.5.9
 Release: 1%{?dist}%{?extra_release}
 License: LGPLv2+
 Group: Development/Libraries
@@ -2005,6 +2005,15 @@ fi
 %endif
 
 %changelog
+* Thu Jan 16 2014 Cole Robinson <crobinso@redhat.com> - 1.0.5.9-1
+- Rebased to version 1.0.5.9
+- Fix crash in virDBusAddWatch (bz #885445)
+- Cleanup migration ports when migration is cancelled (bz #1018530)
+- CVE-2013-6458 libvirt: qemu: job usage issue in several APIs leading to
+  libvirtd crash (bz #1054206, bz #1048631)
+- CVE-2013-6436 libvirt: crash in lxcDomainGetMemoryParameters (bz #1049136,
+  bz #1042252)
+
 * Sat Dec 14 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.8-1
 - Rebased to version 1.0.5.8
 - Fix occasional libvirt-guests.service startup failure
diff --git a/sources b/sources
index 72190a6..1f5b745 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-9d2768876007b25b3bb0ae5e59bd9735  libvirt-1.0.5.8.tar.gz
+afa29733960ea46fd0c1294d87298923  libvirt-1.0.5.9.tar.gz