Having -Werror=format-security would have caught this early but I assume it's not part of the default build options for good reasons (too many packages would break?). Thanks for the clarifications Kees, that indeed reduces the benefit of using hardening-wrapper.
Having -Werror= format- security would have caught this early but I assume it's not part of the default build options for good reasons (too many packages would break?). Thanks for the clarifications Kees, that indeed reduces the benefit of using hardening-wrapper.