diff --git a/.gitignore b/.gitignore
index 7034ede..c2356ba 100644
--- a/.gitignore
+++ b/.gitignore
@@ -31,3 +31,4 @@
 /firewalld-0.3.10.tar.bz2
 /firewalld-0.3.11.tar.bz2
 /firewalld-0.3.12.tar.bz2
+/firewalld-0.3.13.tar.bz2
diff --git a/firewalld.spec b/firewalld.spec
index 0877aab..dd78895 100644
--- a/firewalld.spec
+++ b/firewalld.spec
@@ -1,6 +1,6 @@
 Summary: A firewall daemon with D-Bus interface providing a dynamic firewall
 Name: firewalld
-Version: 0.3.12
+Version: 0.3.13
 Release: 1%{?dist}
 URL:     http://www.firewalld.org
 License: GPLv2+
@@ -26,12 +26,20 @@ Requires: iptables, ebtables
 Requires(post): systemd
 Requires(preun): systemd
 Requires(postun): systemd
+Requires: firewalld-filesystem = %{version}-%{release}
 Requires: firewalld-config
 
 %description
 firewalld is a firewall service daemon that provides a dynamic customizable 
 firewall with a D-Bus interface.
 
+%package -n firewalld-filesystem
+Summary: Firewalld directory layout and rpm macros
+
+%description -n firewalld-filesystem
+This package provides directories and rpm macros which
+are required by other packages that add firewalld configuration files.
+
 %package -n firewall-applet
 Summary: Firewall panel applet
 Requires: %{name} = %{version}-%{release}
@@ -229,14 +237,10 @@ fi
 %{_bindir}/firewall-offline-cmd
 %dir %{_datadir}/bash-completion/completions
 %{_datadir}/bash-completion/completions/firewall-cmd
-%defattr(0640,root,root)
-%attr(0750,root,root) %dir %{_prefix}/lib/firewalld
-%attr(0750,root,root) %dir %{_prefix}/lib/firewalld/icmptypes
-%attr(0750,root,root) %dir %{_prefix}/lib/firewalld/services
-%attr(0750,root,root) %dir %{_prefix}/lib/firewalld/zones
 %{_prefix}/lib/firewalld/icmptypes/*.xml
 %{_prefix}/lib/firewalld/services/*.xml
 %{_prefix}/lib/firewalld/zones/*.xml
+%{_prefix}/lib/firewalld/xmlschema/*.xsd
 %attr(0750,root,root) %dir %{_sysconfdir}/firewalld
 %if 0%{?fedora} <= 20
 %config(noreplace) %{_sysconfdir}/firewalld/firewalld.conf
@@ -265,6 +269,13 @@ fi
 %{_mandir}/man1/firewall*cmd*.1*
 %{_mandir}/man1/firewalld*.1*
 %{_mandir}/man5/firewall*.5*
+
+%files -n firewalld-filesystem
+%dir %{_prefix}/lib/firewalld
+%dir %{_prefix}/lib/firewalld/icmptypes
+%dir %{_prefix}/lib/firewalld/services
+%dir %{_prefix}/lib/firewalld/zones
+%dir %{_prefix}/lib/firewalld/xmlschema
 %{_rpmconfigdir}/macros.d/macros.firewalld
 
 %files -n firewall-applet
@@ -304,6 +315,26 @@ fi
 %endif
 
 %changelog
+* Thu Dec 04 2014 Jiri Popelka <jpopelka@redhat.com> - 0.3.13-1
+- firewalld:
+  - ipXtables: use -w or -w2 if supported (RHBZ#1161745, RHBZ#1151067)
+  - DROP INVALID packets (RHBZ#1169837)
+  - don't use ipv6header for protocol matching. (RHBZ#1065565)
+  - removeAllPassthroughs(): remove passthroughs in reverse order (RHBZ#1167100)
+  - fix config.service.removeDestination() (RHBZ#1164584)
+- firewall-config:
+  - portProtoDialog: other protocol excludes port number/range
+  - better fix for updating zoneStore also in update_active_zones()
+  - fix typo in menu
+- configuration:
+  - new services: tinc, vdsm, mosh, iscsi-target, rsyncd
+  - ship and install XML Schema files. (#8)
+- man pages:
+  - firewalld.dbus, firewalld.direct, firewalld, firewall-cmd
+- spec file:
+  - filesystem subpackage
+  - make dirs&files in /usr/lib/ world-readable (RHBZ#915988)
+
 * Tue Oct 14 2014 Jiri Popelka <jpopelka@redhat.com> - 0.3.12-1
 - firewalld:
   - new runtimeToPermanent and tracked passsthrough support
diff --git a/sources b/sources
index 94a0137..f257f50 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-9bb5b1bf03cc36c78ac9b05335a89ead  firewalld-0.3.12.tar.bz2
+3f292adb4599f387f1ed83ad5c13dc62  firewalld-0.3.13.tar.bz2