diff --git a/389-ds-base.spec b/389-ds-base.spec
index 925bd4b..f0aeaa1 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -21,7 +21,7 @@
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
 Version:          1.2.11.23
-Release:          %{?relprefix}3%{?prerel}%{?dist}
+Release:          %{?relprefix}3.1%{?prerel}%{?dist}
 License:          GPLv2 with exceptions
 URL:              http://port389.org/
 Group:            System Environment/Daemons
@@ -107,6 +107,7 @@ Source0:          http://port389.org/sources/%{name}-%{version}%{?prerel}.tar.bz
 # 389-ds-git.sh should be used to generate the source tarball from git
 Source1:          %{name}-git.sh
 Source2:          %{name}-devel.README
+Patch0:           0000-wip.patch
 
 %description
 389 Directory Server is an LDAPv3 compliant server.  The base package includes
@@ -157,6 +158,7 @@ Development Libraries and headers for the 389 Directory Server base package.
 %prep
 %setup -q -n %{name}-%{version}%{?prerel}
 cp %{SOURCE2} README.devel
+%patch0 -p1
 
 %build
 %if %{use_openldap}
@@ -294,6 +296,9 @@ fi
 %{_libdir}/%{pkgname}/libslapd.so.*
 
 %changelog
+* Tue Oct 15 2013 Rich Megginson <rmeggins@redhat.com> - 1.2.11.23-3.1
+- add mutex around ldap ssl functions/bind/unbind
+
 * Wed Oct  2 2013 Rich Megginson <rmeggins@redhat.com> - 1.2.11.23-3
 - bump version to rebuild again