From 9ebfbb8a7c052e3d600cc2f3588f30920c627e91 Mon Sep 17 00:00:00 2001
From: David Schlenk <dschlenk@convergeone.com>
Date: Fri, 20 Sep 2024 15:05:21 -0500
Subject: [PATCH] Disable MD2 hash algorithm

Resolves: RHEL-61830
---
 openldap.spec | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/openldap.spec b/openldap.spec
index 4a3cc16..7c75551 100644
--- a/openldap.spec
+++ b/openldap.spec
@@ -17,7 +17,7 @@
 
 Name: openldap
 Version: 2.6.7
-Release: 5%{?dist}
+Release: 6%{?dist}
 Summary: LDAP support libraries
 License: OLDAP-2.8
 URL: http://www.openldap.org/
@@ -209,6 +209,8 @@ popd
 %set_build_flags
 # enable experimental support for LDAP over UDP (LDAP_CONNECTIONLESS)
 export CFLAGS="${CFLAGS} ${LDFLAGS} -Wl,--as-needed -DLDAP_CONNECTIONLESS"
+# disable legacy hash algorithm
+export CFLAGS="${CFLAGS} -DOPENSSL_NO_MD2"
 
 pushd openldap-%{version}
 %configure \
@@ -564,6 +566,10 @@ exit 0
 %endif
 
 %changelog
+* Fri Oct 11 2024 Simon Pichugin <spichugi@redhat.com> - 2.6.7-6
+- Disable MD2 hash algorithm
+  Resolves: RHEL-61830
+
 * Thu Aug 15 2024 Simon Pichugin <spichugi@redhat.com> - 2.6.7-5
 - Fix vlvResult patch (RHEL-36474)
 - Fix libslapi definition and a comment typo