diff --git a/ruby.spec b/ruby.spec
index e26a8e8..539cff0 100644
--- a/ruby.spec
+++ b/ruby.spec
@@ -171,7 +171,7 @@
 Summary: An interpreter of object-oriented scripting language
 Name: ruby
 Version: %{ruby_version}%{?development_release}
-Release: 7%{?dist}
+Release: 8%{?dist}
 # Licenses, which are likely not included in binary RPMs:
 # Apache-2.0:
 #   benchmark/gc/redblack.rb
@@ -792,6 +792,7 @@ pushd %{_vpath_builddir}
         --enable-shared \
         --with-ruby-version='' \
         --enable-multiarch \
+        --disable-fortify-source `# Should not really be needed: https://bugs.ruby-lang.org/issues/20520` \
         %{?with_yjit: --enable-yjit} \
 
 popd
@@ -1714,6 +1715,9 @@ make -C %{_vpath_builddir} runruby TESTRUN_SCRIPT=" \
 
 
 %changelog
+* Tue May 28 2024 Vít Ondruch <vondruch@redhat.com> - 3.3.1-8
+- Make sure fortification flags are applied.
+
 * Tue Apr 23 2024 Vít Ondruch <vondruch@redhat.com> - 3.3.1-7
 - Upgrade to Ruby 3.3.1.
   Resolves: rhbz#2276680