diff --git a/gnu/packages/gnutls.scm b/gnu/packages/gnutls.scm
index 0391f54..0b0df81 100644
--- a/gnu/packages/gnutls.scm
+++ b/gnu/packages/gnutls.scm
@@ -63,7 +63,7 @@ specifications.")
 (define-public gnutls
   (package
     (name "gnutls")
-    (version "3.2.12")
+    (version "3.3.1")
     (source (origin
              (method url-fetch)
              (uri
@@ -75,12 +75,10 @@ specifications.")
                              "/gnutls-" version ".tar.xz"))
              (sha256
               (base32
-               "0195nliarszq5mginli6d2f5z7ljnd7mwa46iy9z8pkcgy56khbl"))))
+               "1fyg0bwfc003795hl5vs35m3rg2yqj9m5z76rlhfs0g5xaxrwjwq"))
+             (patches (list (search-patch
+                             "gnutls-remove-gnutls_secure_malloc.patch")))))
     (build-system gnu-build-system)
-    (arguments
-     ;; Work around build issue reported at
-     ;; <https://lists.gnu.org/archive/html/guix-devel/2014-03/msg00027.html>.
-     '(#:make-flags '("CPPFLAGS=-DENABLE_RSA_EXPORT")))
     (native-inputs
      `(("pkg-config" ,pkg-config)))
     (inputs
@@ -98,4 +96,4 @@ specifications.")
 and DTLS protocols.  It is provided in the form of a C library to support the
 protocols, as well as to parse and write X.5009, PKCS 12, OpenPGP and other
 required structures.")
-    (license lgpl2.1+)))
+    (license lgpl2.1+)))  ; see the "LICENSING" section in 'README'
diff --git a/gnu/packages/patches/gnutls-remove-gnutls_secure_malloc.patch b/gnu/packages/patches/gnutls-remove-gnutls_secure_malloc.patch
new file mode 100644
index 0000000..1f9555c
--- /dev/null
+++ b/gnu/packages/patches/gnutls-remove-gnutls_secure_malloc.patch
@@ -0,0 +1,15 @@
+Remove 'gnutls_secure_malloc' (see
+<https://gitorious.org/gnutls/gnutls/commit/f42e825d96b06f7069e4e9e8011a3ea8b93b4382>).
+
+Patch by Ludovic Courtès <address@hidden>.
+
+--- gnutls-3.3.1/guile/src/core.c-orig	2014-04-23 01:24:26.455377062 +0400
++++ gnutls-3.3.1/guile/src/core.c	2014-04-23 01:25:14.489068473 +0400
+@@ -3366,7 +3366,6 @@
+   /* Use Guile's allocation routines, which will run the GC if need be.  */
+   gnutls_malloc = scm_malloc;
+   gnutls_realloc = scm_realloc;
+-  gnutls_secure_malloc = scm_malloc;
+   gnutls_free = free;
+ 
+   (void) gnutls_global_init ();