Detect restore of -D_FORTIFY_SOURCE=2

[blhc/blhc.git] / NEWS

diff --git a/NEWS b/NEWS
index 62dd83b9292d8d481cbf4b941e65b44221e26764..1c8247f11a5eb97bac4409c72896cf237155cc53 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -4,6 +4,14 @@ NEWS
 Version 0.XX
 ------------
 
+- Detect restore of -D_FORTIFY_SOURCE=2 after it was overwritten by
+  -D_FORTIFY_SOURCE=0 or 1 or -U_FORTIFY_SOURCE; reported by Mike Hommey
+  (Debian bug #898332).
+
+
+Version 0.08
+------------
+
 - Support new dpkg versions which replaced Dpkg::Arch's debarch_to_debtriplet
   with debarch_to_debtuple (Debian Bug #844393), reported by Johannes Schauer.
 - Support Open MPI mpicc/mpicxx compiler wrappers to prevent false positives
@@ -16,6 +24,11 @@ Version 0.XX
   Eriberto Mota for the suggestion. This is not enabled per default to prevent
   false negatives as the flags are missing from the build log and blhc can't
   detect if the compiler applied PIE internally (c.f. Debian Bug 845339).
+- Add --line-numbers command line option
+- Sync architecture specific hardening support with dpkg 1.19.0.5.
+- Use proper look back for non-verbose detection if DEB_BUILD_OPTIONS=parallel
+  is present. Previously it was too small causing false-positives if the
+  option was detected.
 
 
 Version 0.07