diff --git a/php-pecl-http.spec b/php-pecl-http.spec
index 94a7292..746d97b 100644
--- a/php-pecl-http.spec
+++ b/php-pecl-http.spec
@@ -26,6 +26,8 @@ Group:          Development/Languages
 URL:            http://pecl.php.net/package/pecl_http
 Source0:        http://pecl.php.net/get/%{proj_name}-%{version}%{?prever}.tgz
 
+Patch0:         %{proj_name}-build.patch
+
 # From http://www.php.net/manual/en/http.configuration.php
 Source1:        %{proj_name}.ini
 
@@ -112,6 +114,8 @@ These are the files needed to compile programs using HTTP extension.
 mv %{proj_name}-%{version}%{?prever} NTS
 cd NTS
 
+%patch0 -p1
+
 extver=$(sed -n '/#define PHP_PECL_HTTP_VERSION/{s/.* "//;s/".*$//;p}' php_http.h)
 if test "x${extver}" != "x%{version}%{?prever}"; then
    : Error: Upstream HTTP version is now ${extver}, expecting %{version}%{?prever}.
@@ -225,6 +229,7 @@ fi
 - Update to 2.0.4
 - fix link to documentation
 - update provided configuration
+- add upstream patch for -Werror=format-security
 
 * Tue Dec 10 2013 Remi Collet <remi@fedoraproject.org> - 2.0.3-1
 - Update to 2.0.3 (stable)