https://sources.debian.org/data/main/a/a2ps/1:4.14-2/debian/patches/fix-format-security.diff

Index: b/lib/psgen.c
===================================================================
--- a/lib/psgen.c
+++ b/lib/psgen.c
@@ -232,7 +232,7 @@
     default:
       *buf = '\0';
       ps_escape_char (job, cp[i], buf);
-      output (jdiv, (char *) buf);
+      output (jdiv, "%s", (char *) buf);
       break;
     }
   }
Index: b/lib/output.c
===================================================================
--- a/lib/output.c
+++ b/lib/output.c
@@ -525,7 +525,7 @@
 		     expand_user_string (job, FIRST_FILE (job),
 					 (const uchar *) "Expand: requirement",
 					 (const uchar *) token));
-	output (dest, expansion);
+	output (dest, "%s", expansion);
 	continue;
       }
 
Index: b/lib/parseppd.y
===================================================================
--- a/lib/parseppd.y
+++ b/lib/parseppd.y
@@ -154,7 +154,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
 }
 
 /*
Index: b/src/parsessh.y
===================================================================
--- a/src/parsessh.y
+++ b/src/parsessh.y
@@ -740,7 +740,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, sshfilename, sshlineno, msg);
+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
 }
 
 /*
Index: b/lib/parseppd.c
===================================================================
--- a/lib/parseppd.c
+++ b/lib/parseppd.c
@@ -1707,7 +1707,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
+  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
 }
 
 /*
Index: b/src/parsessh.c
===================================================================
--- a/src/parsessh.c
+++ b/src/parsessh.c
@@ -2639,7 +2639,7 @@
 void
 yyerror (const char *msg)
 {
-  error_at_line (1, 0, sshfilename, sshlineno, msg);
+  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
 }
 
 /*
' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=8ce6f4dc2879919c12bc76a2f4b01200af97e019&amp;showmsg=1'>root</a>/<a href='/guix/log/gnu?id=8ce6f4dc2879919c12bc76a2f4b01200af97e019&amp;showmsg=1'>gnu</a>/<a href='/guix/log/gnu/installer?id=8ce6f4dc2879919c12bc76a2f4b01200af97e019&amp;showmsg=1'>installer</a>/<a href='/guix/log/gnu/installer/user.scm?id=8ce6f4dc2879919c12bc76a2f4b01200af97e019&amp;showmsg=1'>user.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/installer/user.scm?id=8ce6f4dc2879919c12bc76a2f4b01200af97e019'>Collapse</a>)</th><th class='left'>Author</th></tr>
<tr class='logheader'><td><span title='2019-04-28 22:57:07 +0200'>2019-04-28</span></td><td class='logsubject'><a href='/guix/commit/gnu/installer/user.scm?id=43c1c44a1194579cd9e0149e41886762d9efc9dc'>installer: User can have a "real name".</a></td><td>Ludovic Courtès</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
* gnu/installer/user.scm (&lt;user&gt;)[real-name]: New field.
(users-&gt;configuration)[use-&gt;sexp]: Turn it into a 'comment' field.


</td></tr>
<tr class='logheader'><td><span title='2019-04-25 00:45:35 +0200'>2019-04-25</span></td><td class='logsubject'><a href='/guix/commit/gnu/installer/user.scm?id=91a7c4998fe4f5a2a63f2ddb4bfeeef81c68b6d7'>installer: Ask for the root account password.</a></td><td>Ludovic Courtès</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
Fixes &lt;https://bugs.gnu.org/35399&gt;.

* gnu/installer/newt/user.scm (run-root-password-page): New procedure.
* gnu/installer/user.scm (users-&gt;configuration): Filter out the "root"
account.
* gnu/installer/final.scm (create-user-database): Set 'uid' field in
'user-account' form.


</td></tr>
<tr class='logheader'><td><span title='2019-04-25 00:45:34 +0200'>2019-04-25</span></td><td class='logsubject'><a href='/guix/commit/gnu/installer/user.scm?id=898677ed17672130d20434cd88575d620c97c553'>installer: Ask for user password and initialize /etc/shadow.</a></td><td>Ludovic Courtès</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
Partly fixes &lt;https://bugs.gnu.org/35399&gt;.

* gnu/installer/user.scm (&lt;user&gt;)[password]: New field.
* gnu/installer/final.scm (%seed): New variable.
(integer-&gt;alphanumeric-char, random-string)
(create-user-database): New procedures.
(install-system): Call 'create-user-database'.
* gnu/installer/newt/final.scm (run-install-shell): Add #:users and pass
it to 'install-system'.
(run-final-page): Pass #:users to 'run-install-shell'.
* gnu/installer/newt/user.scm (run-user-add-page): Add password entry.
Pass its result as the 'password' field of &lt;user&gt;.


</td></tr>
<tr class='logheader'><td><span title='2019-01-17 14:04:24 +0100'>2019-01-17</span></td><td class='logsubject'><a href='/guix/commit/gnu/installer/user.scm?id=47c94801656c7e9ddf1dcfe0189b48d7c57d0a1d'>installer: Add user module.</a></td><td>Mathieu Othacehe</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
* gnu/installer/user.scm: New file.


</td></tr>