diff --git a/CHANGES b/CHANGES
index f8b25530fc..76cd286236 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3970.   [contrib]       Fixed a use after free bug in the SDB LDAP driver.
+                        [RT #37237]
+
 3969.	[test]		Added 'delv' system test. [RT #36901]
 
 3968.	[bug]		Silence spurious log messages when using 'named -[46]'.
diff --git a/contrib/sdb/ldap/ldapdb.c b/contrib/sdb/ldap/ldapdb.c
index caade37c80..c43342cd27 100644
--- a/contrib/sdb/ldap/ldapdb.c
+++ b/contrib/sdb/ldap/ldapdb.c
@@ -133,7 +133,6 @@ ldapdb_getconn(struct ldapdb_data *data)
 			free(threaddata->index);
 			while (threaddata->data != NULL) {
 				conndata = threaddata->data;
-				free(conndata->index);
 				if (conndata->data != NULL)
 					ldap_unbind((LDAP *)conndata->data);
 				threaddata->data = conndata->next;