diff --git a/ldns-keygen-hmac-memory.patch b/ldns-keygen-hmac-memory.patch
new file mode 100644
index 0000000..2fa05a7
--- /dev/null
+++ b/ldns-keygen-hmac-memory.patch
@@ -0,0 +1,13 @@
+Index: keys.c
+===================================================================
+--- keys.c	(revision 2895)
++++ keys.c	(revision 2897)
+@@ -1050,7 +1050,7 @@
+ 		case LDNS_SIGN_HMACMD5:
+ 		case LDNS_SIGN_HMACSHA1:
+ 		case LDNS_SIGN_HMACSHA256:
+-			bin = LDNS_XMALLOC(unsigned char, size);
++			bin = LDNS_XMALLOC(unsigned char, ldns_key_hmac_size(k));
+ 			if (!bin) {
+ 				return NULL;
+ 			}
diff --git a/ldns.spec b/ldns.spec
index 4e3d1be..76d6895 100644
--- a/ldns.spec
+++ b/ldns.spec
@@ -1,7 +1,7 @@
 Summary: Lowlevel DNS(SEC) library with API
 Name: ldns
 Version: 1.5.1
-Release: 3%{?dist}
+Release: 4%{?dist}
 License: BSD
 Url: http://www.nlnetlabs.nl/%{name}/
 Source: http://www.nlnetlabs.nl/downloads/%{name}-%{version}.tar.gz
@@ -89,7 +89,7 @@ rm -rf %{buildroot}
 %postun -p /sbin/ldconfig
 
 %changelog
-* Thu Apr 16 2009 Paul Wouters <paul@xelerance.com> - 1.5.1-3
+* Thu Apr 16 2009 Paul Wouters <paul@xelerance.com> - 1.5.1-4
 - Memory management bug when generating a sha256 key, see:
   https://bugzilla.redhat.com/show_bug.cgi?id=493953