Here's the actual patch I used for the NMU (Steve's doesn't apply cleanly).
diff --git a/debian/changelog b/debian/changelog index a9794e3..c84c65c 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,11 @@ +smstools (1.16-1.1) unstable; urgency=high + + * Non-maintainer upload + * CVE-2006-0083: Apply patch to fix format string issue + in logging code. Closes: #347221. + + -- Florian Weimer <[EMAIL PROTECTED]> Mon, 23 Jan 2006 13:49:46 +0100 + smstools (1.16-1) unstable; urgency=low * New upstream release diff --git a/src/logging.c b/src/logging.c index f33ff8b..5e9974e 100644 --- a/src/logging.c +++ b/src/logging.c @@ -83,7 +83,7 @@ void writelogfile(int severity,char* for if (severity<=Level) { if (Filehandle<0) - syslog(severity,text); + syslog(severity,"%s",text); else { time(&now); -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]