diff --git a/.gitignore b/.gitignore
index 23a5507..0d82b14 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,4 @@
 /AppStream-0.12.3.tar.xz
 /AppStream-0.12.4.tar.xz
+/0002-Don-t-warn-about-issues-in-a-cache-refresh-if-there-.patch
+/0010-as-pool-Fix-g-i-for-get_components_-while-GPtrArray-.patch
diff --git a/appstream.spec b/appstream.spec
index caf8f3d..fc54ba0 100644
--- a/appstream.spec
+++ b/appstream.spec
@@ -14,6 +14,8 @@ URL:     https://github.com/ximion/appstream
 Source0: http://www.freedesktop.org/software/appstream/releases/AppStream-%{version}.tar.xz
 
 ## upstream patches (lookaside cache)
+Patch2:  0002-Don-t-warn-about-issues-in-a-cache-refresh-if-there-.patch
+Patch10: 0010-as-pool-Fix-g-i-for-get_components_-while-GPtrArray-.patch
 
 ## upstreamable patches
 
@@ -184,6 +186,7 @@ mv %{buildroot}%{_datadir}/metainfo/*.xml \
 %changelog
 * Tue Jan 15 2019 Rex Dieter <rdieter@fedoraproject.org> - 0.12.4-1
 - 0.12.4
+- pull in some upstream fixes (#1667060)
 
 * Tue Nov 27 2018 Rex Dieter <rdieter@fedoraproject.org> - 0.12.3-1
 - 0.12.3
diff --git a/sources b/sources
index 08fe691..99a33fc 100644
--- a/sources
+++ b/sources
@@ -1 +1,3 @@
 SHA512 (AppStream-0.12.4.tar.xz) = 8a7a10b0c577a22b89e0b5505415d5b799f3316b4c87b0a2a9281e7b2672e041225896ac847781504b2828c5ed8a250e3a0558355df838d58e174a984b04e3d0
+SHA512 (0002-Don-t-warn-about-issues-in-a-cache-refresh-if-there-.patch) = d06d9c1d9b1d7927130ef9e2bb0d6be15fe1d4a7969a68f73400ec17d6ee779b1f00263b52f7102c173844980415b997ba28fe06694688e915133b24e31c230e
+SHA512 (0010-as-pool-Fix-g-i-for-get_components_-while-GPtrArray-.patch) = e7176e44895bd5d42b336ca59fc4708760854e08a35c6b5390af1c4559f59081a477f4204ebbb66c56b6101c7980ab83d27a62842974a8626d04bf5422f510b8