diff --git a/CHANGES b/CHANGES
index b0c3a2e10d3f043bba0a7664e6b7a00a5fcdc415..7ea6a594a242dffee647e18098e6ed6613582568 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,7 @@
 OpenLDAP 2.4 Change Log
 
 OpenLDAP 2.4.23 Engineering
+	Fixed liblutil off-by-one with delta (ITS#6541)
 	Fixed slapd syncrepl rid logging (ITS#6533)
  	Fixed contrib/nssov network.c missing patch (ITS#6562)
 	Documentation
diff --git a/libraries/liblutil/utils.c b/libraries/liblutil/utils.c
index 0fdd00027ca4ddae0a42d9f6ca1ce26203b11e1a..65a0980a2092750f20f7354ebc42f3e116d41e6a 100644
--- a/libraries/liblutil/utils.c
+++ b/libraries/liblutil/utils.c
@@ -147,7 +147,7 @@ size_t lutil_localtime( char *s, size_t smax, const struct tm *tm, long delta )
 	snprintf( p, smax - 15, "%02ld%02ld", delta / 3600,
 			( delta % 3600 ) / 60 );
 
-	return ret + 5;
+	return ret + 4;
 }
 
 int lutil_tm2time( struct lutil_tm *tm, struct lutil_timet *tt )