diff --git a/dtc.changes b/dtc.changes
index 4a544a6..7c14190 100644
--- a/dtc.changes
+++ b/dtc.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Feb  4 12:27:13 UTC 2025 - Andreas Schwab <schwab@suse.de>
+
+- Mark assembler output as noexecstack
+
 -------------------------------------------------------------------
 Tue Oct 22 07:24:23 UTC 2024 - Guillaume GARDET <guillaume.gardet@opensuse.org>
 
diff --git a/dtc.spec b/dtc.spec
index b3b10a0..4f9566e 100644
--- a/dtc.spec
+++ b/dtc.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package dtc
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -72,6 +72,7 @@ rm -f %{buildroot}/%{_libdir}/*.a
 
 %check
 export EXTRA_CFLAGS="%{optflags}"
+export CC="gcc -Wa,--noexecstack"
 %make_build check
 
 %files