https://gcc.gnu.org/bugzilla/show_bug.cgi?id=109475
--- Comment #1 from Andrew Pinski <pinskia at gcc dot gnu.org> --- >So we can say that these are the only two that are default enabled? No in fact -Wformat-security is not enabled by default in the released version of GCC from the FSF, the distro I know that enables it by default is both Debian and Ubuntu.