diff --git a/.gitignore b/.gitignore
index 446550a..7131aec 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@
 /kabi-dw-bd56a6004d5d409d7d03c386400da3f49a8c4c03.tar.gz
 /kabi-dw-9bc7003c12f15303d05e234e1fa884daeee700d4.tar.gz
 /kabi-dw-543ed656d009a4fc46a5a2b6ea60e0fd760865ec.tar.gz
+/kabi-dw-973fee0f575cc530347bac7f906e7967d4399735.tar.gz
diff --git a/kabi-dw.spec b/kabi-dw.spec
index 547d2ed..850cf0a 100644
--- a/kabi-dw.spec
+++ b/kabi-dw.spec
@@ -1,6 +1,6 @@
 %global forgeurl https://github.com/skozina/kabi-dw
 %global commitdate 20220110
-%global commit 543ed656d009a4fc46a5a2b6ea60e0fd760865ec
+%global commit 973fee0f575cc530347bac7f906e7967d4399735
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %forgemeta -i
@@ -31,12 +31,11 @@ later comparing the text files.
 %forgesetup
 
 %build
-#CFLAGS=$RPM_OPT_FLAGS LDFLAGS=$RPM_LD_FLAGS make debug
-
-# The following option need to be removed once fixed upstream
-# https://github.com/skozina/kabi-dw/issues/17
-LDFLAGS+=" -z muldefs "
-
+LDFLAGS+=" -pie "
+%ifarch x86_64
+CFLAGS+=" -fcf-protection=full "
+%endif
+CFLAGS+=" -fPIE -D_GLIBCXX_ASSERTIONS -fstack-clash-protection -g"
 %set_build_flags
 %make_build
 
diff --git a/sources b/sources
index db0b64e..6050ffc 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (kabi-dw-543ed656d009a4fc46a5a2b6ea60e0fd760865ec.tar.gz) = 65083a080d46f630647c1bc68f354b01ac3ce4a12a90eb57f9a2fd8c921f6920a84e74ba6686ad2c6a0a0cb46efd9a6bca486e69ad63a132dbe45f7ea5c8b7ef
+SHA512 (kabi-dw-973fee0f575cc530347bac7f906e7967d4399735.tar.gz) = b62ccd892ad7c98ea9398f4f6a21a347bf064ded206843ff484a2adae8ce68428e325ae717e7fb4f50881644976c6a265d3b677cae4bdb264b88cab871bb4c37