https://sources.debian.org/data/main/a/a2ps/1:4.14-2/debian/patches/fix-format-security.diff

Index: b/lib/psgen.c
===================================================================
--- a/lib/psgen.c
+++ b/lib/psgen.c
@@ -232,7 +232,7 @@
     default:
       *buf = '\0';
       ps_escape_char (job, cp[i], buf);
-      output (jdiv, (char *) buf);
+      output (jdiv, "%s", (char *) buf);
       break;
     }
   }
Index: b/lib/output.c
===================================================================
--- a/lib/output.c
+++ b/lib/output.c
@@ -525,7 +525,7 @@
 		     expand_user_string (job, FIRST_FILE (job),
 					 (const uchar *) "Expand: requirement",
 					 (const uchar *) token));
-	output (dest, expansion);
+	output (dest, "%s", expansion);
 	continue;
       }
 
Index: b/lib/parseppd.y
===================================================================
--- a/lib/parseppd.y
+++ b/lib/parseppd.y
@@ -154,7 +154,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
 }
 
 /*
Index: b/src/parsessh.y
===================================================================
--- a/src/parsessh.y
+++ b/src/parsessh.y
@@ -740,7 +740,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, sshfilename, sshlineno, msg);
+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
 }
 
 /*
Index: b/lib/parseppd.c
===================================================================
--- a/lib/parseppd.c
+++ b/lib/parseppd.c
@@ -1707,7 +1707,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
 }
 
 /*
Index: b/src/parsessh.c
===================================================================
--- a/src/parsessh.c
+++ b/src/parsessh.c
@@ -2639,7 +2639,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, sshfilename, sshlineno, msg);
+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
 }
 
 /*
='/guix/log/?id=902099a8c0fae2288d1da6d2da683b251b492691'>root</a>/<a href='/guix/log/etc?id=902099a8c0fae2288d1da6d2da683b251b492691'>etc</a>/<a href='/guix/log/etc/system-tests.scm?id=902099a8c0fae2288d1da6d2da683b251b492691'>system-tests.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/etc/system-tests.scm?id=902099a8c0fae2288d1da6d2da683b251b492691&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2022-04-11 00:25:33 +0200'>2022-04-11</span></td><td><a href='/guix/commit/etc/system-tests.scm?id=dbde386794cb5f4773b94a20ef585ca0f881544a'>tests: System tests really parameterize 'current-guix-package'.</a><span class='msg-avail'>...<span class='msg-tooltip'>Until now, 'current-guix-package' was parameterized in the wrong
context.  Thus, 'current-guix' would end up building a variant of the
'guix' package instead of the package returned by
'channel-source-&gt;package', which is much less expensive to build.

* etc/system-tests.scm (mparameterize): New macro.
(tests-for-current-guix): Change the 'value' field of each &lt;system-test&gt;
record to parameterize 'current-guix-package' for good.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-03-23 00:06:58 +0100'>2020-03-23</span></td><td><a href='/guix/commit/etc/system-tests.scm?id=8b18f5cb309f670b08ad35df6425f4e9e19d8a82'>tests: Use the same source as ci.guix.gnu.org.</a><span class='msg-avail'>...<span class='msg-tooltip'>* etc/system-tests.scm (system-test-manifest): In 'local-file' call, use
a name that is a function of COMMIT to match what Cuirass does.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-03-05 16:33:38 +0100'>2020-03-05</span></td><td><a href='/guix/commit/etc/system-tests.scm?id=5ec4156bbcaec8337f78411204d59e59e706103b'>tests: Add a manifest for system tests.</a><span class='msg-avail'>...<span class='msg-tooltip'>The manifest can be passed to 'guix build -m', 'guix weather -m', and so
on.  It can also be passed to an installed 'guix' (without
./pre-inst-env), with the exception so far of installation tests.

* build-aux/run-system-tests.scm: Remove.  Move interesting bits move
to...
* etc/system-tests.scm: ... here.  New file.
* Makefile.am (EXTRA_DIST): Remove 'build-aux/run-system-tests.scm' and
add 'etc/system-tests.scm'.
(check-system): Rewrite to run 'guix build -m etc/system-tests.scm'.
</span></span></td><td>Ludovic Courtès</td></tr>