Rebuild with new RPM_LD_FLAGS
redhat-rpm-config added annobin flags to build_ldflags (bug #1983727):
$ rpm --eval '%{build_ldflags}'
-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1
perl needs to be rebuilt to pass them to XS modules:
$ perl -e 'use Config; print $Config{ldflags}, qq{\n}'
-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -fstack-protector-strong -L/usr/local/lib
Without that annocheck reports on i686:
Hardened: /usr/lib/perl5/vendor_perl/auto/JavaScript/Minifier/XS/XS.so: FAIL: stack-realign test because stack realign
See <https://bugzilla.redhat.com/show_bug.cgi?id=2013694#c10> and the
next comment.