gentoo-overlay/app-shells/dash/files/dash-0.5.9.1-format-security.patch

Origin: https://bugzilla.redhat.com/show_bug.cgi?id=1037030#c2

--- a/src/jobs.c
+++ a/src/jobs.c
@@ -427,7 +427,7 @@ sprint_status(char *s, int status, int sigonly)
 				goto out;
 #endif
 		}
-		col = fmtstr(s, 32, strsignal(st));
+		col = fmtstr(s, 32, "%s", strsignal(st));
 #ifdef WCOREDUMP
 		if (WCOREDUMP(status)) {
 			col += fmtstr(s + col, 16, " (core dumped)");