diff --git a/openldap.spec b/openldap.spec
index 8ccecb9..24588a0 100644
--- a/openldap.spec
+++ b/openldap.spec
@@ -16,7 +16,7 @@
 
 Name: openldap
 Version: 2.6.6
-Release: 3%{?dist}
+Release: 4%{?dist}
 Summary: LDAP support libraries
 License: OLDAP-2.8
 URL: http://www.openldap.org/
@@ -196,6 +196,8 @@ popd
 %set_build_flags
 # enable experimental support for LDAP over UDP (LDAP_CONNECTIONLESS)
 export CFLAGS="${CFLAGS} ${LDFLAGS} -Wl,--as-needed -Wl,-z,now -DLDAP_CONNECTIONLESS"
+# disable legacy hash algorithm
+export CFLAGS="${CFLAGS} -DOPENSSL_NO_MD2"
 
 pushd openldap-%{version}
 %configure \
@@ -548,6 +550,10 @@ exit 0
 %{_libdir}/libslapi-2.4*.so.*
 
 %changelog
+* Fri Oct 11 2024 Simon Pichugin <spichugi@redhat.com> - 2.6.6-4
+- Disable MD2 hash algorithm
+  Resolves: RHEL-59715
+
 * Fri Feb 9 2024 Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
 - Use systemd-sysusers for ldap user and group
   Replace License with SPDX identifier