Stephen Gallagher wrote:
There was an issue[1] with GCC7 during the mass-rebuild. Despite the
Fedora-wide setting of -Werror=format-security, GCC did not process its
command-line properly and an unknown number of packages were built without
this flag appropriately set.
That was not a new issue in GCC 7, it is how -Werror=format-security had
behaved since its introduction. It is just that the behavior change in GCC 7
came in late, after the mass rebuild had already happened.
For what it's worth, I don't actually see how the old behavior was a bug to
begin with: if you ask for -Wno-format, you get it; -Wformat-security being
a subset of -Wformat, it should be obvious that -Wno-format also implies
-Wno-format-security. The new behavior forces it to be stated explicitly.
Kevin Kofler