diff --git a/libdb.spec b/libdb.spec
index e2f9b4ff125fd54c33aeabf203aca9c8942895f6..102a582610ddd8823886a316b61e798fc32d17ce 100644
--- a/libdb.spec
+++ b/libdb.spec
@@ -1,6 +1,6 @@
 Name:		libdb
 Version:	5.3.28
-Release:	39
+Release:	40
 Summary:	The Berkeley DB database library for C
 License:	BSD and LGPLv2 and Sleepycat
 URL:		https://www.oracle.com/database/berkeley-db/
@@ -135,7 +135,7 @@ make -C db.1.85/PORT/%{_os} OORG="$CFLAGS"
 test -d dist/dist-tls || mkdir dist/dist-tls
 
 /bin/sh libtool --tag=CC --mode=compile	%{__cc} $RPM_OPT_FLAGS -Idb.1.85/PORT/%{_os}/include -D_REENTRANT -c util/db_dump185.c -o dist/dist-tls/db_dump185.lo
-/bin/sh libtool --tag=LD --mode=link %{__cc} -o dist/dist-tls/db_dump185 dist/dist-tls/db_dump185.lo db.1.85/PORT/%{_os}/libdb.a
+/bin/sh libtool --tag=LD --mode=link %{__cc} -fPIE -pie -z now -o dist/dist-tls/db_dump185 dist/dist-tls/db_dump185.lo db.1.85/PORT/%{_os}/libdb.a
 
 for dir in dist lang/sql/sqlite lang/sql/jdbc lang/sql/odbc; do
   cp /usr/lib/rpm/%{?_vendor}/config.{guess,sub} "$dir"
@@ -212,6 +212,9 @@ mv man/* %{buildroot}%{_mandir}/man1/
 %{_mandir}/man1
 
 %changelog
+* Fri Dec 02 2022 xiewenhao <xiewenhao@kylinos.com.cn> - 5.3.28-40
+- add '-fPIE -pie -z now' in --mode arguments
+
 * Mon Oct 17 2022 konglidong <konglidong@uniontech.com> - 5.3.28-39
 - Change the Buildrequire from java-devel to java-1.8.0-openjdk-devel