diff --git a/shadow-libsubid-Dealocate-memory-on-exit.patch b/shadow-libsubid-Dealocate-memory-on-exit.patch
new file mode 100644
index 0000000000000000000000000000000000000000..587db45982d37b15318b7f937f491e5c79bf8395
--- /dev/null
+++ b/shadow-libsubid-Dealocate-memory-on-exit.patch
@@ -0,0 +1,23 @@
+From 18f113cc4609e00c4f95072dbe954174f2c29be1 Mon Sep 17 00:00:00 2001
+From: Daniel Bershatsky <d.bershatsky2@skoltech.ru>
+Date: Wed, 12 Jun 2024 19:26:45 +0300
+Subject: [PATCH] libsubid: Dealocate memory on exit
+
+---
+ src/getsubids.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/src/getsubids.c b/src/getsubids.c
+index fb645b19..0753abd7 100644
+--- a/src/getsubids.c
++++ b/src/getsubids.c
+@@ -45,5 +45,6 @@ int main(int argc, char *argv[])
+ 		printf("%d: %s %lu %lu\n", i, owner,
+ 			ranges[i].start, ranges[i].count);
+ 	}
++	free(ranges);
+ 	return 0;
+ }
+-- 
+2.27.0
+
diff --git a/shadow.spec b/shadow.spec
index 65529422443de650035f8e0c8ccadf2af0064733..8659663478482ded748f47ba091ccca41984293e 100644
--- a/shadow.spec
+++ b/shadow.spec
@@ -1,6 +1,6 @@
 Name: shadow
 Version: 4.14.3
-Release: 1
+Release: 2
 Epoch: 2
 License: BSD and GPLv2+
 Summary: Tools for managing accounts and shadow password files
@@ -19,6 +19,7 @@ Source7: newusers
 Patch0: usermod-unlock.patch
 Patch1: shadow-add-sm3-crypt-support.patch
 Patch2: shadow-Remove-encrypted-passwd-for-useradd-gr.patch
+Patch3: shadow-libsubid-Dealocate-memory-on-exit.patch
 
 BuildRequires: gcc, libselinux-devel, audit-libs-devel, libsemanage-devel
 BuildRequires: libacl-devel, libattr-devel
@@ -188,6 +189,9 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libsubid.{la,a}
 %{_mandir}/*/*
 
 %changelog
+* Fri Sep 6 2024 zhangzikang <zhangzikang@kylinos.cn> - 2:4.14.3-2
+- libsubid: Dealocate memory on exit
+
 * Thu Feb 1 2024 zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
 - update version to 4.14.3
   -Avoid null pointer dereference