diff --git a/libnettle.changes b/libnettle.changes
index 512a5a8..0fab06d 100644
--- a/libnettle.changes
+++ b/libnettle.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Thu Apr 23 09:31:06 UTC 2015 - vpereira@suse.com
+
+added patch: off-by-one-test-suite.patch
+
+- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328) 
+
 -------------------------------------------------------------------
 Sat Apr 11 19:43:21 UTC 2015 - astieger@suse.com
 
diff --git a/libnettle.spec b/libnettle.spec
index 6d05a82..76dec89 100644
--- a/libnettle.spec
+++ b/libnettle.spec
@@ -29,6 +29,7 @@ Source0:        https://ftp.gnu.org/gnu/nettle/nettle-%{version}.tar.gz
 Source1:        https://ftp.gnu.org/gnu/nettle/nettle-%{version}.tar.gz.sig
 Source2:        %{name}.keyring
 Source3:        baselibs.conf
+Patch0:         off-by-one-test-suite.patch
 BuildRequires:  gmp-devel
 BuildRequires:  makeinfo
 BuildRequires:  pkgconfig
@@ -91,6 +92,7 @@ operations using the nettle library.
 
 %prep
 %setup -q -n nettle-%{version}
+%patch0
 
 %build
 %configure \
diff --git a/off-by-one-test-suite.patch b/off-by-one-test-suite.patch
new file mode 100644
index 0000000..02a9177
--- /dev/null
+++ b/off-by-one-test-suite.patch
@@ -0,0 +1,13 @@
+Index: testsuite/des-compat-test.c
+===================================================================
+--- testsuite/des-compat-test.c.orig
++++ testsuite/des-compat-test.c
+@@ -346,7 +346,7 @@ test_main(void)
+ 
+ #ifndef LIBDES_LIT
+ 	if (verbose) printf("Doing ede ecb\n");
+-	for (i=0; i<(NUM_TESTS-1); i++)
++	for (i=0; i<(NUM_TESTS-2); i++)
+ 		{
+ 		if ((j=des_key_sched(&key_data[i], ks)) != 0)
+ 			{