Backport format string bug fix in sshconnect.c (closes: #225238).

2 files changed, 3 insertions, 2 deletions

diff --git a/debian/changelog b/debian/changelog
index 67e4d81f2..ff1092690 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,7 @@ openssh (1:3.6.1p2-11) UNRELEASED; urgency=low
   * Comment out pam_limits in default configuration, for now at least
     (closes: #198254).
   * Use invoke-rc.d (if it exists) to run the init script.
+  * Backport format string bug fix in sshconnect.c (closes: #225238).
 
  -- Colin Watson <cjwatson@debian.org>  Tue, 30 Dec 2003 13:38:02 +0000
 
diff --git a/sshconnect.c b/sshconnect.c
index 013a896b7..0423955f7 100644
--- a/sshconnect.c
+++ b/sshconnect.c
@@ -806,7 +806,7 @@ check_host_key(char *host, struct sockaddr *hostaddr, Key *host_key,
                             host_file, host_line);
                 }
                 if (options.strict_host_key_checking == 1) {
-                        log(msg);
+                        log("%s", msg);
                         error("Exiting, you have requested strict checking.");
                         goto fail;
                 } else if (options.strict_host_key_checking == 2) {
@@ -815,7 +815,7 @@ check_host_key(char *host, struct sockaddr *hostaddr, Key *host_key,
                         if (!confirm(msg))
                                 goto fail;
                 } else {
-                        log(msg);
+                        log("%s", msg);
                 }
         }