diff --git a/llvm.spec b/llvm.spec
index 0262b6a..7c4b0e1 100644
--- a/llvm.spec
+++ b/llvm.spec
@@ -72,7 +72,7 @@
 
 Name:		%{pkg_name}
 Version:	%{maj_ver}.%{min_ver}.%{patch_ver}%{?rc_ver:~rc%{rc_ver}}
-Release:	1%{?dist}
+Release:	2%{?dist}
 Summary:	The Low Level Virtual Machine
 
 License:	NCSA
@@ -237,6 +237,9 @@ mv %{cmake_srcdir} cmake
 %global optflags %(echo %{optflags} | sed 's/-g /-g1 /')
 %endif
 
+# Copy CFLAGS into ASMFLAGS, so -fcf-protection is used when compiling assembly files.
+export ASMFLAGS=$CFLAGS
+
 # force off shared libs as cmake macros turns it on.
 %cmake	-G Ninja \
 	-DBUILD_SHARED_LIBS:BOOL=OFF \
@@ -565,6 +568,9 @@ fi
 %endif
 
 %changelog
+* Tue Apr 18 2023 Nikita Popov <npopov@redhat.com> - 15.0.7-2
+- Copy CFLAGS to ASMFLAGs to enable CET in asm files
+
 * Thu Jan 12 2023 Nikita Popov <npopov@redhat.com> - 15.0.7-1
 - Update to LLVM 15.0.7