diff --git a/.gitignore b/.gitignore
index b527bb3..33bdbca 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,3 +15,6 @@
 /knewstuff-5.34.0.tar.xz
 /knewstuff-5.35.0.tar.xz
 /knewstuff-5.36.0.tar.xz
+/0001-Document-engine-calls.patch
+/0002-Revert-some-part-of-eb2e65a882f0b95efeefe0115d9a9428.patch
+/0003-install-categories-file.patch
diff --git a/kf5-knewstuff.spec b/kf5-knewstuff.spec
index e7d01c5..65bf50f 100644
--- a/kf5-knewstuff.spec
+++ b/kf5-knewstuff.spec
@@ -2,7 +2,7 @@
 
 Name:    kf5-%{framework}
 Version: 5.36.0
-Release: 1%{?dist}
+Release: 2%{?dist}
 Summary: KDE Frameworks 5 Tier 3 module for downloading application assets
 
 License: LGPLv2+
@@ -17,6 +17,11 @@ URL:     https://cgit.kde.org/%{framework}.git
 %endif
 Source0:        http://download.kde.org/%{stable}/frameworks/%{versiondir}/%{framework}-%{version}.tar.xz
 
+## upstream patches
+Patch1: 0001-Document-engine-calls.patch
+Patch2: 0002-Revert-some-part-of-eb2e65a882f0b95efeefe0115d9a9428.patch
+Patch3: 0003-install-categories-file.patch
+
 # filter qml provides
 %global __provides_exclude_from ^%{_kf5_qmldir}/.*\\.so$
 
@@ -57,7 +62,7 @@ developing applications that use %{name}.
 
 
 %prep
-%autosetup -n %{framework}-%{version}
+%autosetup -n %{framework}-%{version} -p1
 
 
 %build
@@ -81,6 +86,7 @@ make install/fast DESTDIR=%{buildroot} -C %{_target_platform}
 %files -f knewstuff5_qt.lang
 %doc README.md
 %license COPYING.LIB
+%{_kf5_sysconfdir}/xdg/knewstuff.*
 %{_kf5_libdir}/libKF5NewStuff.so.*
 %{_kf5_libdir}/libKF5NewStuffCore.so.*
 %{_kf5_datadir}/kf5/knewstuff/
@@ -104,6 +110,9 @@ make install/fast DESTDIR=%{buildroot} -C %{_target_platform}
 
 
 %changelog
+* Wed Jul 05 2017 Rex Dieter <rdieter@fedoraproject.org> - 5.36.0-2
+- pull in some upstream fixes
+
 * Mon Jul 03 2017 Rex Dieter <rdieter@fedoraproject.org> - 5.36.0-1
 - 5.36.0
 
diff --git a/sources b/sources
index 9a1268d..d508611 100644
--- a/sources
+++ b/sources
@@ -1 +1,4 @@
 SHA512 (knewstuff-5.36.0.tar.xz) = 51eb8cc7b6486f422900d4efefbe26ddb5bff0ae089840d6c7749a1e6b531fedafe8b305909bdc82c718c95ed934e4805778d6d88090554bd5a4f8d999e49c57
+SHA512 (0001-Document-engine-calls.patch) = 661354387f46270aff697d4325699bd4d201fd5e0d7371ccc34047aaa3b4604bba0831219b0980fa2d0b3bc6f866d5021accbd9d42d8fab933eec1c88dd772bf
+SHA512 (0002-Revert-some-part-of-eb2e65a882f0b95efeefe0115d9a9428.patch) = 07f9a0107f161ec851ec01c58004c57018de6ce37862857dbf475cb65a2d5eb142690c9705cf304480c27292465a45f8098dc3e4d3d65ab9de7d14adcfa64a21
+SHA512 (0003-install-categories-file.patch) = a3d975f0a71dbb544af9e6b773b50e01e49fd185a4f55cdde8488e93f5bc463d7064ca3e5832dd18afac7d352a77de22245c5752f41ed7ee62f6bf51b8618804