diff --git a/krb5-mini.changes b/krb5-mini.changes
index 01336d5..1996a51 100644
--- a/krb5-mini.changes
+++ b/krb5-mini.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Jul  7 17:38:11 UTC 2020 - Andreas Schwab <schwab@suse.de>
+
+- Don't fail if %{_lto_cflags} is empty
+
 -------------------------------------------------------------------
 Fri Jun 12 08:38:23 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
 
diff --git a/krb5-mini.spec b/krb5-mini.spec
index 6d38e2f..a0304e9 100644
--- a/krb5-mini.spec
+++ b/krb5-mini.spec
@@ -198,8 +198,10 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so
 rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/spake.so
 rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
 
+%if "%{_lto_cflags}" != ""
 # Don't add the lto flags to the public link flags.
 sed -i "s/%{_lto_cflags}//" %{buildroot}%{_bindir}/krb5-config
+%endif
 
 %find_lang mit-krb5
 
diff --git a/krb5.changes b/krb5.changes
index 94143bf..5dbb4b9 100644
--- a/krb5.changes
+++ b/krb5.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Jul  7 17:38:11 UTC 2020 - Andreas Schwab <schwab@suse.de>
+
+- Don't fail if %{_lto_cflags} is empty
+
 -------------------------------------------------------------------
 Fri Jun 12 08:38:23 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
 
diff --git a/krb5.spec b/krb5.spec
index aa81796..6834091 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -276,8 +276,10 @@ rm -rf %{buildroot}%{_datadir}/examples
 # manually remove test plugin since configure doesn't support disabling it at build time
 rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
 
+%if "%{_lto_cflags}" != ""
 # Don't add the lto flags to the public link flags.
 sed -i "s/%{_lto_cflags}//" %{buildroot}%{_bindir}/krb5-config
+%endif
 
 %find_lang mit-krb5