diff --git a/SOURCES/cyrus-imapd-2.4.17-free_body_leak.patch b/SOURCES/cyrus-imapd-2.4.17-free_body_leak.patch
new file mode 100644
index 0000000..56d1652
--- /dev/null
+++ b/SOURCES/cyrus-imapd-2.4.17-free_body_leak.patch
@@ -0,0 +1,23 @@
+diff -up cyrus-imapd-2.4.17/imap/imapd.c.renaud cyrus-imapd-2.4.17/imap/imapd.c
+--- cyrus-imapd-2.4.17/imap/imapd.c.renaud	2017-05-02 16:17:54.000000000 +0200
++++ cyrus-imapd-2.4.17/imap/imapd.c	2017-05-05 09:00:31.000000000 +0200
+@@ -3446,7 +3446,10 @@ void cmd_append(char *tag, char *name, c
+ 				     (const char **) stage[i]->flag,
+ 				     stage[i]->nflags, 0);
+ 	    }
+-	    if (body) message_free_body(body);
++	    if (body) {
++		message_free_body(body);
++		free(body);
++	    }
+ 	}
+ 
+ 	if (!r) {
+@@ -9745,6 +9748,7 @@ struct searchargs *s;
+     freestrlist(s->cc);
+     freestrlist(s->bcc);
+     freestrlist(s->subject);
++    freestrlist(s->messageid);
+     freestrlist(s->body);
+     freestrlist(s->text);
+     freestrlist(s->header_name);
diff --git a/SPECS/cyrus-imapd.spec b/SPECS/cyrus-imapd.spec
index 1e4e0b1..779a809 100644
--- a/SPECS/cyrus-imapd.spec
+++ b/SPECS/cyrus-imapd.spec
@@ -1,6 +1,6 @@
 Name: cyrus-imapd
 Version: 2.4.17
-Release: 8%{?dist}
+Release: 8%{?dist}.1
 
 %define ssl_pem_file %{_sysconfdir}/pki/%{name}/%{name}.pem
 
@@ -42,6 +42,8 @@ Patch8: cyrus-imapd-2.4.12-debugopt.patch
 # https://bugzilla.redhat.com/show_bug.cgi?id=1196210
 # https://access.redhat.com/security/cve/CVE-2014-3566
 Patch9: cyrus-imapd-2.3.16-tlsconfig.patch
+## https://bugzilla.redhat.com/show_bug.cgi?id=1449501
+Patch10: cyrus-imapd-2.4.17-free_body_leak.patch
 
 BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
 
@@ -122,6 +124,8 @@ one running the server.
 %patch8 -p1 -b .debugopt
 %patch9 -p1
 
+%patch10 -p1
+
 install -m 644 %{SOURCE11} doc/
 
 # only to update config.* files
@@ -472,6 +476,9 @@ fi
 %{_mandir}/man1/*
 
 %changelog
+* Wed May 10 2017 Pavel Zhukov <pzhukov@redhat.com> - 2.4.17-8.1
+- Resolves: #1449501 - Fix memory leak in cmd_append
+
 * Thu Mar 19 2015 Pavel Šimerda <psimerda@redhat.com> - 2.4.17-8
 - Resolves: #1196210 - backport method to disable SSLv3