diff --git a/pesign-boo1143063-remove-var-tracking.patch b/pesign-boo1143063-remove-var-tracking.patch
new file mode 100644
index 0000000..cfb41ff
--- /dev/null
+++ b/pesign-boo1143063-remove-var-tracking.patch
@@ -0,0 +1,13 @@
+diff --git a/Make.defaults b/Make.defaults
+index 7892d73..2d18005 100644
+--- a/Make.defaults
++++ b/Make.defaults
+@@ -47,7 +47,7 @@ cflags	= $(CFLAGS) $(ARCH3264) \
+ 	$(call pkg-config-cflags)
+ clang_ccldflags =
+ gcc_ccldflags = -fno-merge-constants \
+-	-fvar-tracking -fvar-tracking-assignments -fkeep-inline-functions \
++	-fvar-tracking-assignments -fkeep-inline-functions \
+ 	-Wl,--fatal-warnings,--no-allow-shlib-undefined,--default-symver \
+ 	-Wl,-O2 -Wl,--no-undefined-version -Wl,-z,relro,-z,now \
+ 	-Wl,--no-add-needed,--no-copy-dt-needed-entries,--as-needed
diff --git a/pesign.changes b/pesign.changes
index ee626c9..deeed3a 100644
--- a/pesign.changes
+++ b/pesign.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Jul 31 03:26:37 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
+
+- Add pesign-boo1143063-remove-var-tracking.patch to remove
+  var-tracking from the default CFLAGS (boo#1143063)
+
 -------------------------------------------------------------------
 Thu Jul 11 09:00:21 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
 
diff --git a/pesign.spec b/pesign.spec
index bdc75c2..89ba7cf 100644
--- a/pesign.spec
+++ b/pesign.spec
@@ -34,6 +34,8 @@ Patch3:         pesign-run.patch
 Patch4:         pesign-fix-authvar-write-loop.patch
 # PATCH-FIX-UPSTREAM pesign-efikeygen-Fix-the-build-with-nss-3.44.patch glin@suse.com -- Fix the NSS 3.44 compilation error
 Patch5:         pesign-efikeygen-Fix-the-build-with-nss-3.44.patch
+# PATCH-FIX-SUSE pesign-boo1143063-remove-var-tracking.patch -- boo#1143063 Remove var-tracking from default CFLAGS
+Patch6:         pesign-boo1143063-remove-var-tracking.patch
 BuildRequires:  efivar-devel
 BuildRequires:  libuuid-devel
 BuildRequires:  mozilla-nss-devel
@@ -55,6 +57,7 @@ with the PE and Authenticode specifications.
 %patch3 -p1
 %patch4 -p1
 %patch5 -p1
+%patch6 -p1
 
 %build
 make %{?_smp_mflags} CFLAGS="%{optflags}"