diff -Nru netcdf-4.4.1.1/debian/changelog netcdf-4.4.1.1/debian/changelog
--- netcdf-4.4.1.1/debian/changelog	2016-11-29 17:35:36.000000000 +0000
+++ netcdf-4.4.1.1/debian/changelog	2017-04-04 06:09:19.000000000 +0000
@@ -1,8 +1,10 @@
-netcdf (1:4.4.1.1-1build1) zesty; urgency=medium
+netcdf (1:4.4.1.1-2) unstable; urgency=medium
 
-  * Rebuild against new hdf5
+  * Enable PIE hardening buildflags.
+    (closes: #859430)
+  * Drop unused lintian overrides for hardening-no-pie.
 
- -- Iain Lane <iain@orangesquash.org.uk>  Tue, 29 Nov 2016 17:35:36 +0000
+ -- Bas Couwenberg <sebastic@debian.org>  Tue, 04 Apr 2017 08:09:19 +0200
 
 netcdf (1:4.4.1.1-1) unstable; urgency=medium
 
diff -Nru netcdf-4.4.1.1/debian/netcdf-bin.lintian-overrides netcdf-4.4.1.1/debian/netcdf-bin.lintian-overrides
--- netcdf-4.4.1.1/debian/netcdf-bin.lintian-overrides	2016-08-28 13:45:53.000000000 +0000
+++ netcdf-4.4.1.1/debian/netcdf-bin.lintian-overrides	1970-01-01 00:00:00.000000000 +0000
@@ -1,2 +0,0 @@
-# PIE breaks the build
-netcdf-bin: hardening-no-pie *
diff -Nru netcdf-4.4.1.1/debian/rules netcdf-4.4.1.1/debian/rules
--- netcdf-4.4.1.1/debian/rules	2016-08-28 13:45:53.000000000 +0000
+++ netcdf-4.4.1.1/debian/rules	2017-04-04 06:08:33.000000000 +0000
@@ -2,9 +2,8 @@
 
 #export DH_VERBOSE=1
 
-# Enable hardening build flags, except:
-#  pie: causes build failure
-export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+# Enable hardening build flags
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
 
 DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)