Security: Format string is not a string literal - Rebuild of the Debian archive with clang

"Security: Format string is not a string literal" build failure(s) — clang 3.2

The following code builds without any issue with gcc and fails with clang:

#include <stdio.h>

void foo(void) {
    char buffer[1024];
    sprintf(buffer, "%n", 2);
}

gcc -Werror -c foo.c
clang -Werror -c foo.c

Package	Version	Supposed error message	Full log
cronutils	1.4-3	runstat.c:79:31: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
gccxml	0.9.0+cvs20120420-4	gengtype-lex.l:594:31: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
ghostscript	9.05~dfsg-6.3	./base/gsdevice.c:1010:25: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
gnome-pie	0.5.4-1	triggerSelectWindow.c:545:138: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
libsoup2.4	2.38.1-2	coding-test.c:69:28: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
ncap	1.9.2-1	asprintf.c:35:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
poker-network	1.7.7-3.2	main.c:192:17: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
rcs	5.8.1-2	b-excwho.c:126:15: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
thoggen	0.7.1-1	th-app-window.c:1140:44: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log

9 errors