Security: Format string is not a string literal - Rebuild of the Debian archive with clang

"Security: Format string is not a string literal" build failure(s) — clang 3.0

The following code builds without any issue with gcc and fails with clang:

#include <stdio.h>

void foo(void) {
    char buffer[1024];
    sprintf(buffer, "%n", 2);
}

gcc -Werror -c foo.c
clang -Werror -c foo.c

Package	Version	Supposed error message	Full log	Bug report
gccxml	0.9.0+cvs20111013-1	genmodes.c:829:28: error: use of '%n' in format string discouraged (potentially insecure) [-Werror,-Wformat-security]	Log
xfce4-power-manager	1.0.10-4	xfpm-battery.c:404:37: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log

2 errors