diff --git a/babl.spec b/babl.spec
index a5ab698..a477206 100644
--- a/babl.spec
+++ b/babl.spec
@@ -1,7 +1,7 @@
 Summary:	A dynamic, any to any, pixel format conversion library
 Name:		babl
 Version:	0.1.2
-Release:	3%{?dist}
+Release:	4%{?dist}
 # The gggl codes contained in this package are under the GPL, with exceptions allowing their use under libraries covered under the LGPL
 License:	LGPLv3+ and GPLv3+
 Group:		System Environment/Libraries
@@ -47,7 +47,10 @@ This package contains documentation needed for developing with %{name}.
 %setup -q
 
 %build
-CFLAGS="%optflags -fno-strict-aliasing" \
+# use PIC/PIE because babl is likely to deal with data coming from untrusted
+# sources
+CFLAGS="-fPIC %optflags -fno-strict-aliasing"
+LDFLAGS="-pie"
 %configure --disable-static
 
 make V=1 %{?_smp_mflags}
@@ -89,6 +92,10 @@ rm -rf %{buildroot}
 %doc %{develdocdir}
 
 %changelog
+* Wed Jun 23 2010 Nils Philippsen <nils@redhat.com> - 0.1.2-4
+- use PIC/PIE because babl is likely to deal with data coming from untrusted
+  sources
+
 * Wed Jun 23 2010 Nils Philippsen <nils@redhat.com> - 0.1.2-3
 - build with -fno-strict-aliasing