diff --git a/openldap.spec b/openldap.spec
index 63927a6..0915461 100644
--- a/openldap.spec
+++ b/openldap.spec
@@ -9,7 +9,7 @@
 Summary: The configuration files, libraries, and documentation for OpenLDAP
 Name: openldap
 Version: %{version}
-Release: 6%{?dist}
+Release: 7{?dist}
 License: OpenLDAP
 Group: System Environment/Daemons
 Source0: ftp://ftp.OpenLDAP.org/pub/OpenLDAP/openldap-release/openldap-%{version}.tgz
@@ -34,6 +34,7 @@ Patch6: openldap-2.3.19-gethostbyXXXX_r.patch
 Patch8: openldap-2.3.34-pthread.patch
 Patch9: openldap-2.3.37-smbk5pwd.patch
 Patch10: openldap-2.4.6-multilib.patch
+Patch11: openldap-2.3.27-modify-noop.patch
 
 # Patches for the evolution library
 Patch200: openldap-2.4.6-evolution-ntlm.patch
@@ -146,6 +147,7 @@ pushd openldap-%{version}
 %patch8 -p1 -b .pthread
 %patch9 -p1 -b .smbk5pwd
 %patch10 -p1 -b .multilib
+%patch11 -p0 -b .modify-noop
 
 cp %{_datadir}/libtool/config.{sub,guess} build/
 popd
@@ -605,6 +607,9 @@ fi
 %attr(0644,root,root)      %{evolution_connector_libdir}/*.a
 
 %changelog
+* Fri Feb  8 2008 Jan Safranek <jsafranek@redhat.com> 2.4.7-7
+- fix CVE-2008-0658 (#432014)
+
 * Mon Jan 28 2008 Jan Safranek <jsafranek@redhat.com> 2.4.7-6
 - init script fixes