diff --git a/ruby.spec b/ruby.spec
index 41ed693..a358e18 100644
--- a/ruby.spec
+++ b/ruby.spec
@@ -792,6 +792,7 @@ pushd %{_vpath_builddir}
         --enable-shared \
         --with-ruby-version='' \
         --enable-multiarch \
+        --disable-fortify-source `# Should not really be needed: https://bugs.ruby-lang.org/issues/20520` \
         %{?with_yjit: --enable-yjit} \
 
 popd
@@ -1724,6 +1725,7 @@ make -C %{_vpath_builddir} runruby TESTRUN_SCRIPT=" \
 * Tue May 28 2024 Vít Ondruch <vondruch@redhat.com> - 3.3.1-8
 - Adjust the test to updated `checksec` output.
   Resolves: rhbz#2282953
+- Make sure fortification flags are applied.
 
 * Tue Apr 23 2024 Vít Ondruch <vondruch@redhat.com> - 3.3.1-7
 - Upgrade to Ruby 3.3.1.