diff --git a/gnutls.spec b/gnutls.spec
index 5083911c6677ec2b798dcd0a3837f644fb78308e..6c48132add3c44104b673a031c0cc5442198d459 100644
--- a/gnutls.spec
+++ b/gnutls.spec
@@ -1,6 +1,6 @@
 Name: gnutls
 Version: 3.8.2
-Release: 6
+Release: 7
 Summary: The GNU Secure Communication Protocol Library
 
 License: LGPLv2.1+ and GPLv3+
@@ -124,6 +124,7 @@ echo "SYSTEM=NORMAL" >> tests/system.prio
 # via the crypto policies
 
 %build
+%define _lto_cflags %{nil}
 %if "%toolchain" != "clang"
 CCASFLAGS="$CCASFLAGS -Wa,--generate-missing-build-notes=yes"
 export CCASFLAGS
@@ -245,6 +246,9 @@ make check %{?_smp_mflags}
 %endif
 
 %changelog
+* Tue Jul 28 2025 xuraoqing <xuraoqing@huawei.com> - 3.8.2-7
+- disable lto
+
 * Thu Feb 13 2025 xuraoqing <xuraoqing@huawei.com> - 3.8.2-6
 - fix CVE-2024-12243