hardening-wrapper (2.7ubuntu2) xenial; urgency=high

  * Use -no-pie to disable PIE, when not otherwise enabled.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 05 Jan 2016 16:49:36 +0000

hardening-wrapper (2.7ubuntu1) vivid; urgency=medium

  * Merge with Debian; remaining changes:
    - Stop installing links for GCC 4.2, 4.3, 4.5.
  * Install links for GCC 5.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 18 Mar 2015 13:09:18 +0100

hardening-wrapper (2.7) unstable; urgency=medium

  * hardening.make: drop mips restriction on building PIE.
  * hardened-cc: fix comment typo, thanks to Steven Honeyman.
  * hardened-cc: disable format-security when related arguments
    are already present, thanks to Steve Beattie (Closes: 767269).
  * tests/Makefile.common: include tests for new format-security
    disabling abilities.

 -- Kees Cook <kees@debian.org>  Fri, 14 Nov 2014 10:27:04 -0800

hardening-wrapper (2.6) unstable; urgency=medium

  * Acknowledge NMU, thanks Aurelien Jarno!
  * debian/rules: add clarifying comment about dpkg-buildflags.
  * hardening.make, debian/README.Debian:
    - switch to -fstack-protector-strong, thanks to Romain Francoise
      (Closes: 762662).
    - enable stack protector on mips*, arm64.
  * hardened-cc: use -fstack-protector-strong when old GCC not found.
  * tests/
    - Makefile: add -fstack-protector-strong to logs
    - Makefile.common, ssp-buffer-type-protect.c: check for -strong behavior

 -- Kees Cook <kees@debian.org>  Wed, 24 Sep 2014 07:51:25 -0700

hardening-wrapper (2.5+nmu1ubuntu2) utopic; urgency=medium

  * Divert ld.gold on arm64.

 -- Matthias Klose <doko@ubuntu.com>  Tue, 14 Oct 2014 12:29:01 +0200

hardening-wrapper (2.5+nmu1ubuntu1) utopic; urgency=low

  * Merge with Debian.  Remaining changes:
    - hardened-cc: don't set -Wformat options if they are already set
    - Allow -fstack-protector on arm64
    - Don't install a symlink for gold on architectures not having a gold port.
    - Stop installing links for GCC 4.2, 4.3, 4.5.

 -- Steve Beattie <sbeattie@ubuntu.com>  Wed, 17 Sep 2014 23:09:19 -0700

hardening-wrapper (2.5+nmu1) unstable; urgency=medium

  * Non-maintainer upload.
  * Disable standard hardening flags for test suite, to avoid conflicting
    with hardening-wrapper's own flags which are being tested. Thanks to
    Romain Francoise for the patch (Closes: 752717).

 -- Aurelien Jarno <aurel32@debian.org>  Thu, 21 Aug 2014 13:50:24 +0200

hardening-wrapper (2.5ubuntu3) utopic; urgency=medium

  * hardened-cc: don't set -Wformat options if they are already set
    (LP: #1347257)

 -- Steve Beattie <sbeattie@ubuntu.com>  Thu, 24 Jul 2014 15:55:40 -0700

hardening-wrapper (2.5ubuntu2) trusty; urgency=medium

  * Allow -fstack-protector on arm64 now that GCC and glibc support it.

 -- Adam Conrad <adconrad@ubuntu.com>  Fri, 07 Mar 2014 18:51:18 +0800

hardening-wrapper (2.5ubuntu1) trusty; urgency=medium

  * Merge with Debian; remaining changes:
    - Don't install a symlink for gold on architectures not having a gold port.
    - Stop installing links for GCC 4.2, 4.3, 4.5.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 18 Dec 2013 12:36:36 +0100

# For older changelog entries, run 'apt-get changelog hardening-wrapper'
