Security: Format string is not a string literal - Rebuild of the Debian archive with clang

"Security: Format string is not a string literal" build failure(s)
clang 3.2

The following code builds without any issue with gcc and fails with clang:

#include <stdio.h>

void foo(void) {
    char buffer[1024];
    sprintf(buffer, "%n", 2);
}

gcc -Werror -c foo.c
clang -Werror -c foo.c

Versions: 2.9 - 3.0 - 3.1 - 3.2 - 3.3 - 3.4 - 3.4.2 - 3.5.0 - 3.6.0 - 3.8.1 - 3.9.1 - 4.0.1 - 5.0 - 6.0 - 8.0.1 - 9.0.1 - 10.0.0 - 11.0.0 - 12.0.1 - 13.0.0

Package	Version	Supposed error message	Full log
cronutils	1.4-3	runstat.c:79:31: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
gccxml	0.9.0+cvs20120420-4	gengtype-lex.l:594:31: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
ghostscript	9.05~dfsg-6.3	./base/gsdevice.c:1010:25: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
gnome-pie	0.5.4-1	triggerSelectWindow.c:545:138: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
libsoup2.4	2.38.1-2	coding-test.c:69:28: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
ncap	1.9.2-1	asprintf.c:35:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
poker-network	1.7.7-3.2	main.c:192:17: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
rcs	5.8.1-2	b-excwho.c:126:15: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
thoggen	0.7.1-1	th-app-window.c:1140:44: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log

9 errors

Debian Package rebuild