* debian/rules, debian/hardening-wrapper.{prerm,preinst,postinst}: remove gcc-4.1 diversions since it has been removed from unstable. * hardened-cc, hardening.make: add "-Werror=format-security" by default (Closes: #587358). * tests/Makefile.common, tests/format.c: add test for newly added "-Werror=format-security" default option. * hardened-cc, hardening.make: add "--param ssp-buffer-size=4" by default to catch smaller character arrays. * tests/Makefile.common, tests/ssp-buffer-size-{protect,skip}.c: add tests for newly added "--param ssp-buffer-size=4" default. * debian/README.Debian: updated to include newly added options. * hardened-cc: disable -fstack-protector when -ffreestanding used. * hardening.make: provide examples for working around build-time collisions between "-fPIE" and "-fPIC" (Closes: #596150).