diff --git a/pkgs/applications/version-management/cvs/default.nix b/pkgs/applications/version-management/cvs/default.nix
index 3aace6b7e021..74a2267043cb 100644
--- a/pkgs/applications/version-management/cvs/default.nix
+++ b/pkgs/applications/version-management/cvs/default.nix
@@ -10,7 +10,7 @@ stdenv.mkDerivation {
 
   patches = [ ./getcwd-chroot.patch ];
 
-  hardeningDisable = [ "format" ];
+  hardeningDisable = [ "fortify" "format" ];
 
   preConfigure = ''
     # Apply the Debian patches.