diff --git a/krb5-mini.changes b/krb5-mini.changes
index fcd28e5..b3312a2 100644
--- a/krb5-mini.changes
+++ b/krb5-mini.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue May 26 15:36:25 UTC 2020 - Christophe Giboudeaux <christophe@krop.fr>
+
+- Don't add the lto flags to the public link options. (boo#1172038)
+
 -------------------------------------------------------------------
 Mon May  4 09:24:21 UTC 2020 - Samuel Cabrero <scabrero@suse.de>
 
diff --git a/krb5-mini.spec b/krb5-mini.spec
index 8dba7af..a833849 100644
--- a/krb5-mini.spec
+++ b/krb5-mini.spec
@@ -209,6 +209,9 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so
 rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/spake.so
 rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
 
+# Don't add the lto flags to the public link flags.
+sed -i "s/%{_lto_cflags}//" %{buildroot}%{_prefix}/lib/mit/bin/krb5-config
+
 %find_lang mit-krb5
 
 #####################################################
diff --git a/krb5.changes b/krb5.changes
index b185ad7..5037a31 100644
--- a/krb5.changes
+++ b/krb5.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue May 26 15:36:25 UTC 2020 - Christophe Giboudeaux <christophe@krop.fr>
+
+- Don't add the lto flags to the public link options. (boo#1172038)
+
 -------------------------------------------------------------------
 Mon May  4 09:24:21 UTC 2020 - Samuel Cabrero <scabrero@suse.de>
 
diff --git a/krb5.spec b/krb5.spec
index da27c74..4aa3bb9 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -287,6 +287,9 @@ rm -rf %{buildroot}%{_prefix}/lib/mit/share/examples
 # manually remove test plugin since configure doesn't support disabling it at build time
 rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
 
+# Don't add the lto flags to the public link flags.
+sed -i "s/%{_lto_cflags}//" %{buildroot}%{_prefix}/lib/mit/bin/krb5-config
+
 %find_lang mit-krb5
 
 %post -p /sbin/ldconfig