diff --git a/CHANGES b/CHANGES
index 9f28924096ba0fcc284c9ed91bd8d0629dab621a..4be3525e07c4fb0bb635afcbc0fdb3e0355c5fee 100644
--- a/CHANGES
+++ b/CHANGES
@@ -6,6 +6,7 @@ OpenLDAP 2.4.24 Engineering
 	Fixed libldap GnuTLS hang on socket close (ITS#6673)
 	Fixed libldap sasl partial write handling (ITS#6639)
 	Fixed libldap url parsing with NULL host (ITS#6653)
+	Fixed liblutil getpass prompts (ITS#6702)
 	Fixed ldapsearch segfault with deref (ITS#6638)
 	Fixed slapd acl parsing overflow (ITS#6611)
 	Fixed slapd modify to return actual error (ITS#6581)
diff --git a/libraries/liblutil/getpass.c b/libraries/liblutil/getpass.c
index 22359f56e09286aaf69bfbdf98fe72d61e73f6be..a41dd90d8dd4d46320bd7c75ef89d4310d3185c4 100644
--- a/libraries/liblutil/getpass.c
+++ b/libraries/liblutil/getpass.c
@@ -102,8 +102,8 @@ lutil_getpass( const char *prompt )
 #else
 	fi = stdin;
 #endif
-	fprintf(stdout, "%s", prompt); 
-	fflush(stdout);
+	fprintf(stderr, "%s", prompt); 
+	fflush(stderr);
 	i = 0;
 	while ( (c = getc(fi)) != EOF && c != '\n' && c != '\r' )
 		if ( i < (sizeof(pbuf)-1) )
@@ -111,8 +111,8 @@ lutil_getpass( const char *prompt )
 #if defined(HAVE_TERMIOS_H) || defined(HAVE_SGTTY_H)
 	/* tidy up */
 	if (fi != stdin) {
-		fprintf(stdout, "\n"); 
-		fflush(stdout);
+		fprintf(stderr, "\n"); 
+		fflush(stderr);
 		SETFLAGS( ttyb, flags );
 		if (SETATTR(fileno(fi), &ttyb) < 0)
 			perror("SETATTR");