File bnc#484653.diff of Package ntp
--- ntpq/ntpq.c-orig 2009-04-15 16:06:35.000000000 +0200 +++ ntpq/ntpq.c 2009-04-15 16:07:08.000000000 +0200 @@ -3185,9 +3185,9 @@ if (!decodeuint(value, &uval)) output_raw = '?'; else { - char b[10]; + char b[12]; - (void) sprintf(b, "%03lo", uval); + (void) snprintf(b, sizeof(b), "%03lo", uval); output(fp, name, b); } break;