diff --git a/sm/ChangeLog b/sm/ChangeLog
index 84fe6c3c0..5e86589a9 100644
--- a/sm/ChangeLog
+++ b/sm/ChangeLog
@@ -1,5 +1,7 @@
 2006-12-21  Marcus Brinkmann  <marcus@g10code.de>
 
+	* certchain.c (gpgsm_basic_cert_check): Release SUBJECT.
+
 	* encrypt.c (encrypt_dek): Release S_CIPH.
 
 2006-12-20  Marcus Brinkmann  <marcus@g10code.de>
diff --git a/sm/certchain.c b/sm/certchain.c
index 09ffe014e..2745129eb 100644
--- a/sm/certchain.c
+++ b/sm/certchain.c
@@ -1333,6 +1333,7 @@ gpgsm_basic_cert_check (ksba_cert_t cert)
 
  leave:
   xfree (issuer);
+  xfree (subject);
   keydb_release (kh); 
   ksba_cert_release (issuer_cert);
   return rc;