diff --git a/enscript-doublefree.patch b/enscript-doublefree.patch
new file mode 100644
index 0000000..ecdb618
--- /dev/null
+++ b/enscript-doublefree.patch
@@ -0,0 +1,15 @@
+--- enscript-1.6.1/src/main.c.doublefree	2004-09-27 14:21:29.954102199 +0100
++++ enscript-1.6.1/src/main.c	2004-09-27 14:21:31.390828039 +0100
+@@ -1505,9 +1505,9 @@
+ 	      process_file (_("Table of Contents"), &is);
+ 	      is_close (&is);
+ 	    }
+-
+-	  /* Clean up toc file. */
+-	  fclose (toc_fp);
++	  else
++	    /* Clean up toc file. */
++	    fclose (toc_fp);
+ 	}
+ 
+       /* Give trailer a chance to dump itself. */
diff --git a/enscript.spec b/enscript.spec
index 2222217..e8a874d 100644
--- a/enscript.spec
+++ b/enscript.spec
@@ -1,13 +1,14 @@
 Summary: A plain ASCII to PostScript converter.
 Name: enscript
 Version: 1.6.1
-Release: 27
+Release: 28
 License: GPL
 Group: Applications/Publishing
 Source0: ftp://ftp.gnu.org/pub/gnu/enscript-%{version}.tar.gz
 Patch0: enscript-1.6.1-config.patch
 Patch2: enscript-1.6.1-tmp.patch
 Patch3: enscript-1.6.1-locale.patch
+Patch4: enscript-doublefree.patch
 URL: http://people.ssh.fi/mtr/genscript/index.html
 BuildRoot: %{_tmppath}/%{name}-%{version}-root
 Obsoletes: nenscript
@@ -24,6 +25,7 @@ includes many options for customizing printouts.
 %patch0 -p1 -b .config
 %patch2 -p1 -b .tmp
 %patch3 -p1 -b .locale
+%patch4 -p1 -b .doublefree
 
 %build
 %configure --with-media=Letter
@@ -59,6 +61,9 @@ rm -rf %{buildroot}
 %doc AUTHORS ChangeLog FAQ.html NEWS README README.ESCAPES THANKS TODO 
 
 %changelog
+* Mon Sep 27 2004 Tim Waugh <twaugh@redhat.com> 1.6.1-28
+- Fixed double-free problem (bug #132964).
+
 * Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
 - rebuilt