sync architecture specific hardening support with dpkg 1.17.13.

[blhc/blhc.git] / NEWS

diff --git a/NEWS b/NEWS
index 7bd78a719e5126030c0d140ed7305b6594eb7bee..23a9e85859f1f27dc57875f8cb40a3400a8f8a5d 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -12,14 +12,20 @@ Version 0.XX
   reported by Nicolas Boulenguez.
 - Fix buildd architecture detection. Only relevant if the chroot setup fails
   and dpkg-buildpackage is never run; therefore a minor issue.
-- Fix false positive when "compiling" python files (Debian bug #714630),
-  reported by Matthias Klose.
+- Fix false positive when "compiling" python files (Debian bugs #714630 and
+  #753080), reported by Matthias Klose, patch by James McCoy.
 - Don't check for hardening flags in non-verbose compiler commands spanning
   multiple lines.
 - Better handling of libtool commands (Debug bug #717598), reported by Stefan
   Fritsch.
 
-- Sync architecture specific hardening support with dpkg 1.17.1.
+- Sync architecture specific hardening support with dpkg 1.17.13.
+- Check for -fstack-protector-strong on supported platforms (since dpkg
+  1.17.11) (Debian bug #757885), reported by Markus Koschany.
+- Consider lines with -O0 or -Og debug builds and disable checks for -O2
+  (Debian bug #714628), reported by Matthias Klose. Also don't check for
+  fortification in those lines as it requires optimization (Debian bug
+  #757683), also reported by Matthias Klose.
 
 
 Version 0.04