Security: Format string is not a string literal - Rebuild of the Debian archive with clang

"Security: Format string is not a string literal" build failure(s)
clang 2.9

The following code builds without any issue with gcc and fails with clang:

#include <stdio.h>

void foo(void) {
    char buffer[1024];
    sprintf(buffer, "%n", 2);
}

gcc -Werror -c foo.c
clang -Werror -c foo.c

Versions: 2.9 - 3.0 - 3.1 - 3.2 - 3.3 - 3.4 - 3.4.2 - 3.5.0 - 3.6.0 - 3.8.1 - 3.9.1 - 4.0.1 - 5.0 - 6.0 - 8.0.1 - 9.0.1 - 10.0.0 - 11.0.0 - 12.0.1 - 13.0.0

Package	Version	Supposed error message	Full log
dctrl-tools	2.18	lib/msg.h:115:24: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
libgconf-bridge	0.1-2	gconf-bridge.c:1180:47: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
xfce4-power-manager	1.0.10-4	xfpm-battery.c:404:37: error: format string is not a string literal (potentially insecure) [-Wformat-security]	Log

3 errors

Debian Package rebuild