diff --git a/0004-covscan-rhel9.patch b/0004-covscan-rhel9.patch
new file mode 100644
index 0000000..c8b9dfe
--- /dev/null
+++ b/0004-covscan-rhel9.patch
@@ -0,0 +1,14 @@
+diff --git a/pcap-linux.c b/pcap-linux.c
+index 86ce887..3c09617 100644
+--- a/pcap-linux.c
++++ b/pcap-linux.c
+@@ -1599,8 +1599,8 @@ get_if_flags(const char *name, bpf_u_int32 *flags, char *errbuf)
+ 				}
+ 			}
+ 			fclose(fh);
+-			free(pathstr);
+ 		}
++		free(pathstr);
+ 	}
+ 
+ #ifdef ETHTOOL_GLINK
diff --git a/libpcap.spec b/libpcap.spec
index 47d3a3f..801f611 100644
--- a/libpcap.spec
+++ b/libpcap.spec
@@ -1,7 +1,7 @@
 Name:     libpcap
 Epoch:    14
 Version:  1.10.0
-Release:  2%{?dist}
+Release:  3%{?dist}
 Summary:  A system-independent interface for user-level packet capture
 License:  BSD with advertising
 URL:      https://www.tcpdump.org/
@@ -23,6 +23,7 @@ Source:  https://www.tcpdump.org/release/%{name}-%{version}.tar.gz
 Patch0001:      0001-man-tcpdump-and-tcpslice-have-manpages-in-man8.patch
 Patch0002:      0002-pcap-config-mitigate-multilib-conflict.patch
 Patch0003:      0003-pcap-linux-apparently-ctc-interfaces-on-s390-has-eth.patch
+Patch0004:      0004-covscan-rhel9.patch
 
 %description
 Libpcap provides a portable framework for low-level network
@@ -92,6 +93,9 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/libpcap.a
 %{_mandir}/man5/pcap*.5*
 
 %changelog
+* Mon Jul 26 2021 Michal Ruprich <mruprich@redhat.com> - 14:1.10.0-3
+- Resolves: #1938778 - review of important potential issues detected by static analyzers in libpcap
+
 * Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 14:1.10.0-2
 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937