diff --git a/debian/changelog b/debian/changelog
index a5f7073d3..e70eab569 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -36,6 +36,8 @@ freeipa (4.3.0-1) UNRELEASED; urgency=medium
   * control, rules: Add support for custodia.
   * rules: Remove obsolete configure.jar, preferences.html.
   * platform: Fix ipautil.run stdout handling, add support for systemd.
+  * control: Bump server and python-ipaserver dependency on python-ldap
+    to 2.4.22 to fix a bug on ipa-server-upgrade.
 
  -- Timo Aaltonen <tjaalton@debian.org>  Sat, 03 Oct 2015 08:56:31 +0300
 
diff --git a/debian/control b/debian/control
index aca2cded1..85abb81dc 100644
--- a/debian/control
+++ b/debian/control
@@ -99,7 +99,7 @@ Depends:
  python-dateutil,
  python-ipaserver (= ${source:Version}),
  python-gssapi,
- python-ldap (>= 2.4.15),
+ python-ldap (>= 2.4.22),
  slapi-nis (>= 0.54.2),
  softhsm2,
  systemd-sysv,
@@ -306,7 +306,7 @@ Depends:
  python-ipaclient (= ${binary:Version}),
  python-ipalib (>= ${source:Version}),
  python-kdcproxy,
- python-ldap,
+ python-ldap (>= 2.4.22),
  python-libsss-nss-idmap,
  python-pyasn1,
  ${misc:Depends},