diff --git a/libtasn1-3.8-octet-string.patch b/libtasn1-3.8-octet-string.patch
new file mode 100644
index 0000000..a4a0c88
--- /dev/null
+++ b/libtasn1-3.8-octet-string.patch
@@ -0,0 +1,20 @@
+diff -ur libtasn1-3.8.orig/lib/decoding.c libtasn1-3.8/lib/decoding.c
+--- libtasn1-3.8.orig/lib/decoding.c	2014-08-23 09:26:09.000000000 +0200
++++ libtasn1-3.8/lib/decoding.c	2014-09-04 10:38:51.964592251 +0200
+@@ -720,6 +720,7 @@
+ {
+   int len2, len3, counter, tot_len, indefinite;
+   int result;
++  int orig_der_len = der_len;
+ 
+   counter = 0;
+ 
+@@ -777,7 +778,7 @@
+ 	  asn1_length_der (tot_len, temp, &len2);
+ 	  _asn1_set_value (node, temp, len2);
+ 
+-	  ret = _asn1_extract_der_octet (node, der, der_len);
++	  ret = _asn1_extract_der_octet (node, der, orig_der_len);
+ 	  if (ret != ASN1_SUCCESS)
+ 	    return ret;
+ 
diff --git a/libtasn1.spec b/libtasn1.spec
index d686915..5d1778a 100644
--- a/libtasn1.spec
+++ b/libtasn1.spec
@@ -1,7 +1,7 @@
 Summary:	The ASN.1 library used in GNUTLS
 Name:		libtasn1
 Version:	3.8
-Release:	1%{?dist}
+Release:	2%{?dist}
 
 # The libtasn1 library is LGPLv2+, utilities are GPLv3+
 License:	GPLv3+ and LGPLv2+
@@ -10,6 +10,7 @@ URL:		http://www.gnu.org/software/libtasn1/
 Source0:	http://ftp.gnu.org/gnu/libtasn1/%name-%version.tar.gz
 Source1:	http://ftp.gnu.org/gnu/libtasn1/%name-%version.tar.gz.sig
 Patch1:		libtasn1-3.4-rpath.patch
+Patch2:		libtasn1-3.8-octet-string.patch
 BuildRequires:	bison, pkgconfig
 %ifarch %ix86 x86_64 ppc ppc64
 BuildRequires:	valgrind
@@ -52,6 +53,7 @@ data.
 %setup -q
 
 %patch1 -p1 -b .rpath
+%patch2 -p1 -b .octet-string
 
 %build
 %configure --disable-static --disable-silent-rules
@@ -104,6 +106,9 @@ test "$1" = 0 -a -f %_infodir/%name.info.gz && \
 
 
 %changelog
+* Thu Sep 04 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.8-2
+- added bug fix for octet string decoding (#1138218)
+
 * Mon Aug 25 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.8-1
 - new upstream release