pbzip2's build doesn't appear to be honoring $RPM_OPT_FLAGS, reusulting in compiler security features not being used and a more or less useless debuginfo package. More info: http://fedoraproject.org/wiki/Packaging/Debuginfo Possible fix, in %prep: sed -i -e 's/ -O3 / %{optflags} /' Makefile
Updated RPM package to honour $RPM_OPT_FLAGS during Make. Please test to make sure it works as expected.
I'm not a pbzip2 user myself, but the debuginfo packages from the just-being-pushed 0.9.6-3 look better.