diff --git a/docs/changes.txt b/docs/changes.txt
index 774d078..8aab3db 100644
--- a/docs/changes.txt
+++ b/docs/changes.txt
@@ -259,3 +259,7 @@ v0.9.4.3
 * nfqws2: fix broken wifi ssid update
 * github: revert to upx 4.2.4 for all archs except riscv64
 * zapret-lib: apply_fooling throws error if tcp_ts,tcp_seq,tcp_ack,ip_ttl,ip6_ttl,ip_autottl,ip6_autottl are empty or invalid
+
+0.9.4.4
+
+* winws2, dvtws2: ASLR
diff --git a/nfq2/BSDmakefile b/nfq2/BSDmakefile
index 3dab3a0..f52d5b2 100644
--- a/nfq2/BSDmakefile
+++ b/nfq2/BSDmakefile
@@ -2,8 +2,8 @@ CC ?= cc
 PKG_CONFIG ?= pkg-config
 OPTIMIZE ?= -Oz
 MINSIZE ?= -flto=auto -ffunction-sections -fdata-sections
-CFLAGS += -std=gnu99 -s $(OPTIMIZE) $(MINSIZE) -Wno-address-of-packed-member -pie
-LDFLAGS += -flto=auto -Wl,--gc-sections
+CFLAGS += -std=gnu99 -s $(OPTIMIZE) $(MINSIZE) -Wno-address-of-packed-member -fPIC
+LDFLAGS += -flto=auto -Wl,--gc-sections -pie
 LIBS = -lz -lm
 SRC_FILES = *.c crypto/*.c
 
diff --git a/nfq2/Makefile b/nfq2/Makefile
index 10de9c4..ebafac3 100644
--- a/nfq2/Makefile
+++ b/nfq2/Makefile
@@ -3,14 +3,14 @@ PKG_CONFIG ?= pkg-config
 OPTIMIZE ?= -Os
 MINSIZE ?= -flto=auto -ffunction-sections -fdata-sections
 CFLAGS += -std=gnu99 $(OPTIMIZE) $(MINSIZE)
-CFLAGS_LINUX = -Wno-alloc-size-larger-than
+CFLAGS_LINUX = -Wno-alloc-size-larger-than -fPIC
 CFLAGS_SYSTEMD = -DUSE_SYSTEMD
-CFLAGS_BSD = -Wno-address-of-packed-member -pie
+CFLAGS_BSD = -Wno-address-of-packed-member -fPIC
 CFLAGS_CYGWIN = -Wno-address-of-packed-member -static -Wl,--nxcompat
 CFLAGS_CYGWIN32 =
 CFLAGS_CYGWIN64 = -Wl,--dynamicbase -Wl,--high-entropy-va
 CFLAGS_UBSAN = -fsanitize=undefined,alignment -fno-sanitize-recover=undefined,alignment
-LDFLAGS += -flto=auto -Wl,--gc-sections
+LDFLAGS += -flto=auto -Wl,--gc-sections -pie
 LDFLAGS_ANDROID = -llog
 LIBS =
 LIBS_LINUX = -lz -lnetfilter_queue -lnfnetlink -lmnl -lm