diff --git a/gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch b/gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch
new file mode 100644
index 0000000..c3a5ace
--- /dev/null
+++ b/gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch
@@ -0,0 +1,25 @@
+From 18c555b4d2461ad202996398609552b9c4ecd43b Mon Sep 17 00:00:00 2001
+From: rpm-build <rpm-build>
+Date: Wed, 22 Nov 2023 15:21:49 +0900
+Subject: [PATCH] gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch
+
+Signed-off-by: rpm-build <rpm-build>
+---
+ tests/gnutls_ktls.c | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/tests/gnutls_ktls.c b/tests/gnutls_ktls.c
+index ccbe566..049c888 100644
+--- a/tests/gnutls_ktls.c
++++ b/tests/gnutls_ktls.c
+@@ -347,7 +347,6 @@ void doit(void)
+ {
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+AES-128-GCM");
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+AES-256-GCM");
+-	run("NORMAL:-VERS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+CHACHA20-POLY1305");
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.3:-CIPHER-ALL:+AES-128-GCM");
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.3:-CIPHER-ALL:+AES-256-GCM");
+ 	run("NORMAL:-VERS-ALL:+VERS-TLS1.3:-CIPHER-ALL:+CHACHA20-POLY1305");
+-- 
+2.41.0
+
diff --git a/gnutls.spec b/gnutls.spec
index cc11b2e..6d11f5f 100644
--- a/gnutls.spec
+++ b/gnutls.spec
@@ -23,6 +23,7 @@ Patch: gnutls-3.7.3-fips-dsa-post.patch
 Patch: gnutls-3.7.6-drbg-reseed.patch
 Patch: gnutls-3.7.6-fips-sha1-sigver.patch
 Patch: gnutls-3.7.6-gmp-static.patch
+Patch: gnutls-3.7.8-ktls_skip_tls12_chachapoly_test.patch
 
 %bcond_without bootstrap
 %bcond_without dane
@@ -410,7 +411,8 @@ make check %{?_smp_mflags} GNUTLS_SYSTEM_PRIORITY_FILE=/dev/null XFAIL_TESTS="$x
 
 %changelog
 * Fri Dec  8 2023 Daiki Ueno <dueno@redhat.com> - 3.8.2-2
-- Bump nettle BR to 3.9.1
+- Bump nettle dependency to 3.9.1
+- Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)
 
 * Thu Nov 16 2023 Daiki Ueno <dueno@redhat.com> - 3.8.2-1
 - Update to gnutls 3.8.2 (RHEL-14891)