https://sources.debian.org/data/main/a/a2ps/1:4.14-2/debian/patches/fix-format-security.diff

Index: b/lib/psgen.c
===================================================================
--- a/lib/psgen.c
+++ b/lib/psgen.c
@@ -232,7 +232,7 @@
     default:
       *buf = '\0';
       ps_escape_char (job, cp[i], buf);
-      output (jdiv, (char *) buf);
+      output (jdiv, "%s", (char *) buf);
       break;
     }
   }
Index: b/lib/output.c
===================================================================
--- a/lib/output.c
+++ b/lib/output.c
@@ -525,7 +525,7 @@
 		     expand_user_string (job, FIRST_FILE (job),
 					 (const uchar *) "Expand: requirement",
 					 (const uchar *) token));
-	output (dest, expansion);
+	output (dest, "%s", expansion);
 	continue;
       }
 
Index: b/lib/parseppd.y
===================================================================
--- a/lib/parseppd.y
+++ b/lib/parseppd.y
@@ -154,7 +154,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
 }
 
 /*
Index: b/src/parsessh.y
===================================================================
--- a/src/parsessh.y
+++ b/src/parsessh.y
@@ -740,7 +740,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, sshfilename, sshlineno, msg);
+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
 }
 
 /*
Index: b/lib/parseppd.c
===================================================================
--- a/lib/parseppd.c
+++ b/lib/parseppd.c
@@ -1707,7 +1707,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
 }
 
 /*
Index: b/src/parsessh.c
===================================================================
--- a/src/parsessh.c
+++ b/src/parsessh.c
@@ -2639,7 +2639,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, sshfilename, sshlineno, msg);
+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
 }
 
 /*
<a href='/guix/log/?id=e165a2492d73d37c8b95d6970d453b9d88911ee6'>root</a>/<a href='/guix/log/gnu?id=e165a2492d73d37c8b95d6970d453b9d88911ee6'>gnu</a>/<a href='/guix/log/gnu/services?id=e165a2492d73d37c8b95d6970d453b9d88911ee6'>services</a>/<a href='/guix/log/gnu/services/dbus.scm?id=e165a2492d73d37c8b95d6970d453b9d88911ee6'>dbus.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/services/dbus.scm?id=e165a2492d73d37c8b95d6970d453b9d88911ee6&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2020-05-08 16:30:50 +0200'>2020-05-08</span></td><td><a href='/guix/commit/gnu/services/dbus.scm?id=dd0804c67e99914eecc471fdb92f4220425a1cbc'>services: Add descriptions.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-11-13 23:26:36 +0100'>2019-11-13</span></td><td><a href='/guix/commit/gnu/services/dbus.scm?id=1f8ca28b9e517f73d1a640dbbd11eadbf35b885b'>services: dbus: Simplify 'dbus-uuidgen' invocation.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-11-13 23:26:36 +0100'>2019-11-13</span></td><td><a href='/guix/commit/gnu/services/dbus.scm?id=7462a1de22636dde24d56225c67bb3c10118b698'>services: dbus: Log to syslog.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-11-13 23:26:36 +0100'>2019-11-13</span></td><td><a href='/guix/commit/gnu/services/dbus.scm?id=a01d2e300abf8721866c8d1f984b0db90d192f9d'>services: dbus: Add description.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-11-02 00:12:19 +0100'>2019-11-02</span></td><td><a href='/guix/commit/gnu/services/dbus.scm?id=27727b18b8597f7c6fd99adc7797c555aa1c92e9'>services: dbus: Remove non-existent directories from 'system-local.conf'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-11-02 00:12:19 +0100'>2019-11-02</span></td><td><a href='/guix/commit/gnu/services/dbus.scm?id=33f9778bc83086837b99e5c5e99cd514cb0d154e'>services: dbus: Include each service's "share/dbus-1/system.d".</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>