File format-security.patch of Package blame
--- blame-1.3.1/src/util.c.orig 2016-07-31 15:46:47.821642670 +0200 +++ blame-1.3.1/src/util.c 2016-07-31 15:47:09.522059657 +0200 @@ -154,7 +154,7 @@ find_matching_rcs_filename(const char *w assert(first); assert(first_error); - error(0, first_error, first); + error(0, first_error, "%s", first); FREE(first); return NULL;