diff --git a/SOURCES/slapi-nis-bz2003607.patch b/SOURCES/slapi-nis-bz2003607.patch
new file mode 100644
index 0000000..af220f9
--- /dev/null
+++ b/SOURCES/slapi-nis-bz2003607.patch
@@ -0,0 +1,27 @@
+From 02a9cb46ece79d6205a847e6941a772febe47cff Mon Sep 17 00:00:00 2001
+From: Viktor Ashirov <vashirov@redhat.com>
+Date: Thu, 5 Aug 2021 16:04:49 +0200
+Subject: [PATCH] back-sch: fix memory leak in backend_search_cb()
+
+Resolves: rhbz#1967906
+
+Signed-off-by: Viktor Ashirov <vashirov@redhat.com>
+---
+ src/back-sch.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/src/back-sch.c b/src/back-sch.c
+index 0ed06fb..172d619 100644
+--- a/src/back-sch.c
++++ b/src/back-sch.c
+@@ -1793,6 +1793,7 @@ backend_search_cb(Slapi_PBlock *pb)
+ 		slapi_ch_free_string(&target);
+ 		if (cbdata.answer == FALSE) {
+ 			/* None of the configured trees in the sets matched the target at all, ignore search */
++			slapi_sdn_free(&cbdata.target_dn);
+ 			return 0;
+ 		}
+ 	}
+-- 
+2.31.1
+
diff --git a/SPECS/slapi-nis.spec b/SPECS/slapi-nis.spec
index cbf4b4f..4ef42fc 100644
--- a/SPECS/slapi-nis.spec
+++ b/SPECS/slapi-nis.spec
@@ -11,7 +11,7 @@
 
 Name:		slapi-nis
 Version:	0.56.6
-Release:	2%{?dist}
+Release:	2.1%{?dist}
 Summary:	NIS Server and Schema Compatibility plugins for Directory Server
 Group:		System Environment/Daemons
 License:	GPLv2
@@ -19,6 +19,7 @@ URL:		http://pagure.io/slapi-nis/
 Source0:	https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz
 Source1:	https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz.asc
 Patch1: 	cve-2021-3480-fix.patch
+Patch2:         slapi-nis-bz2003607.patch
 
 BuildRequires:  autoconf
 BuildRequires:  automake
@@ -58,6 +59,7 @@ for attributes from multiple entries in the tree.
 %prep
 %setup -q
 %patch1 -p1
+%patch2 -p1
 
 %build
 autoconf --force
@@ -86,6 +88,9 @@ make check
 %{_sbindir}/nisserver-plugin-defs
 
 %changelog
+* Mon Sep 13 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2.1
+- Resolves: rhbz#2003607 - fix memory leak in backend_search_cb
+
 * Wed Apr 07 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
 - CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
 - Resolves: rhbz#1944713