Source: librdkafka
Version: 1.4.2-1
Severity: important
Tags: patch

PIE became default in the Debian gcc in stretch.

Before that explicitly enabling PIE in the hardening
options broke building shared libraries.

After that hardening=-pie disables the default PIE.
This is unwanted for many application, but more important
it breaks static libraries: They cannot be linked into
programs unless the program is built without PIE.

Fix:

--- debian/rules.old    2020-05-31 04:30:21.498327888 +0000
+++ debian/rules        2020-05-31 04:30:28.082322749 +0000
@@ -4,7 +4,7 @@
 #export DH_VERBOSE=1
 
 export DPKG_EXPORT_BUILDFLAGS=1
-export DEB_BUILD_MAINT_OPTIONS=hardening=+bindnow,-pie
+export DEB_BUILD_MAINT_OPTIONS=hardening=+bindnow
 include /usr/share/dpkg/buildflags.mk
 
 %:

Reply via email to