--- /dev/null
+--- foremost-1.5.7/extract.c.formatsec 2013-02-16 11:26:37.783832687 +0100
++++ foremost-1.5.7/extract.c 2013-02-16 11:27:31.220209864 +0100
+@@ -2145,7 +2145,7 @@ unsigned char *extract_exe(f_state *s, u
+ ret_time->tm_sec);
+ chop(ascii_time);
+
+- sprintf(comment, ascii_time);
++ sprintf(comment, "%s", ascii_time);
+ strcat(needle->comment, comment);
+ exe_char = htos(&foundat[22], FOREMOST_LITTLE_ENDIAN);
+ if (exe_char & 0x2000)
Source0: http://foremost.sourceforge.net/pkg/%{name}-%{version}.tar.gz
# Source0-md5: 860119c49665c2a3fb2b0b1d3dbad02a
Patch0: %{name}-sysconfdir.patch
+Patch1: %{name}-format-security.patch
URL: http://foremost.sourceforge.net/
BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
%setup -q
sed -i -e 's,\r$,,' main.h
%patch0 -p1
+%patch1 -p1
%build
%{__make} \