diff --git a/podman.spec b/podman.spec
index fc6fbe8..1190f61 100644
--- a/podman.spec
+++ b/podman.spec
@@ -25,7 +25,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $
 Epoch: 2
 Name: podman
 Version: 4.0.0
-Release: 3%{?dist}
+Release: 4%{?dist}
 Summary: Manage Pods, Containers and Container Images
 License: ASL 2.0 and GPLv3+
 URL: https://%{name}.io/
@@ -229,7 +229,7 @@ export BUILDTAGS="remote $BUILDTAGS"
 
 # build catatonit
 LDFLAGS="%__global_ldflags"
-CFLAGS="%{optflags} -fPIE -D_GNU_SOURCE -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64"
+CFLAGS="%{optflags} -fPIE -D_GNU_SOURCE -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Wp,-D_FORTIFY_SOURCE=2"
 pushd catatonit-%{cataver}
 autoreconf -fi
 %configure
@@ -411,6 +411,10 @@ exit 0
 %{_libexecdir}/%{name}/gvproxy
 
 %changelog
+* Tue Feb 22 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:4.0.0-4
+- add -D_FORTIFY_SOURCE=2 for podman-catatonit
+- Related: #2054115
+
 * Tue Feb 22 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:4.0.0-3
 - depend on containers-common >= 2:1-28
 - Related: #2000051