https://sources.debian.org/data/main/a/a2ps/1:4.14-2/debian/patches/fix-format-security.diff

Index: b/lib/psgen.c
===================================================================
--- a/lib/psgen.c
+++ b/lib/psgen.c
@@ -232,7 +232,7 @@
     default:
       *buf = '\0';
       ps_escape_char (job, cp[i], buf);
-      output (jdiv, (char *) buf);
+      output (jdiv, "%s", (char *) buf);
       break;
     }
   }
Index: b/lib/output.c
===================================================================
--- a/lib/output.c
+++ b/lib/output.c
@@ -525,7 +525,7 @@
 		     expand_user_string (job, FIRST_FILE (job),
 					 (const uchar *) "Expand: requirement",
 					 (const uchar *) token));
-	output (dest, expansion);
+	output (dest, "%s", expansion);
 	continue;
       }
 
Index: b/lib/parseppd.y
===================================================================
--- a/lib/parseppd.y
+++ b/lib/parseppd.y
@@ -154,7 +154,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
 }
 
 /*
Index: b/src/parsessh.y
===================================================================
--- a/src/parsessh.y
+++ b/src/parsessh.y
@@ -740,7 +740,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, sshfilename, sshlineno, msg);
+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
 }
 
 /*
Index: b/lib/parseppd.c
===================================================================
--- a/lib/parseppd.c
+++ b/lib/parseppd.c
@@ -1707,7 +1707,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
 }
 
 /*
Index: b/src/parsessh.c
===================================================================
--- a/src/parsessh.c
+++ b/src/parsessh.c
@@ -2639,7 +2639,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, sshfilename, sshlineno, msg);
+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
 }
 
 /*
form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=bdd107088d2450cebc05daab2fa7218469303a3a'>root</a>/<a href='/guix/log/gnu?id=bdd107088d2450cebc05daab2fa7218469303a3a'>gnu</a>/<a href='/guix/log/gnu/packages?id=bdd107088d2450cebc05daab2fa7218469303a3a'>packages</a>/<a href='/guix/log/gnu/packages/spreadsheet.scm?id=bdd107088d2450cebc05daab2fa7218469303a3a'>spreadsheet.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/spreadsheet.scm?id=bdd107088d2450cebc05daab2fa7218469303a3a&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2021-12-18 15:12:00 -0500'>2021-12-18</span></td><td><a href='/guix/commit/gnu/packages/spreadsheet.scm?id=fcb5b3176c7e752f3ed7816588973a47abcdc304'>gnu: visidata: Update to 2.8.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/spreadsheet.scm (visidata): Update to 2.8.
[inputs, native-inputs]: Migrate inputs to new style.

Signed-off-by: Leo Famulari &lt;leo@famulari.name&gt;
</span></span></td><td>Ryan Prior</td></tr>
<tr><td><span title='2021-12-13 17:48:25 +0100'>2021-12-13</span></td><td><a href='/guix/commit/gnu/packages/spreadsheet.scm?id=8394619baceb118df92e355377fd543bb1aa501a'>gnu: Simplify package inputs.</a><span class='msg-avail'>...<span class='msg-tooltip'>This commit was obtained by running:

  ./pre-inst-env guix style

without any additional argument.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2021-11-22 16:16:28 -0500'>2021-11-22</span></td><td><a href='/guix/commit/gnu/packages/spreadsheet.scm?id=10fad03fcf6fdd2edbdab5f939e3c0edb11a88e2'>gnu: Move visidata to (gnu packages spreadsheet).</a><span class='msg-avail'>...<span class='msg-tooltip'>See &lt;http://issues.guix.gnu.org/47852&gt;.

* gnu/packages/visidata.scm (visidata): Move from here…
* gnu/packages/spreadsheet.scm (visidata): …to here.
* gnu/local.mk (GNU_SYSTEM_MODULES): Adjust accordingly.

Signed-off-by: Leo Famulari &lt;leo@famulari.name&gt;
</span></span></td><td>Jorge Gomez</td></tr>
<tr><td><span title='2021-11-22 16:16:25 -0500'>2021-11-22</span></td><td><a href='/guix/commit/gnu/packages/spreadsheet.scm?id=c4bc557c3a2e59b0d127f1a8a963e1a19daf6cdb'>gnu: Add sc-im.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/spreadsheet.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.

Signed-off-by: Leo Famulari &lt;leo@famulari.name&gt;
</span></span></td><td>Jorge Gomez</td></tr>