Source: librdkafka Version: 1.4.2-1 Severity: important Tags: patch PIE became default in the Debian gcc in stretch.
Before that explicitly enabling PIE in the hardening options broke building shared libraries. After that hardening=-pie disables the default PIE. This is unwanted for many application, but more important it breaks static libraries: They cannot be linked into programs unless the program is built without PIE. Fix: --- debian/rules.old 2020-05-31 04:30:21.498327888 +0000 +++ debian/rules 2020-05-31 04:30:28.082322749 +0000 @@ -4,7 +4,7 @@ #export DH_VERBOSE=1 export DPKG_EXPORT_BUILDFLAGS=1 -export DEB_BUILD_MAINT_OPTIONS=hardening=+bindnow,-pie +export DEB_BUILD_MAINT_OPTIONS=hardening=+bindnow include /usr/share/dpkg/buildflags.mk %: