This patch is used by Gentoo to mitigate CVE-2004-0980:
https://bugs.gentoo.org/69658

CVE: CVE-2004-0980
Upstream-Status: Inactive-Upstream [last commit: 2002]

Index: ez-ipupdate-3.0.11b7/ez-ipupdate.c
===================================================================
--- ez-ipupdate-3.0.11b7.orig/ez-ipupdate.c
+++ ez-ipupdate-3.0.11b7/ez-ipupdate.c
@@ -798,7 +798,7 @@ void show_message(char *fmt, ...)
     sprintf(buf, "message incomplete because your OS sucks: %s\n", fmt);
 #endif
 
-    syslog(LOG_NOTICE, buf);
+    syslog(LOG_NOTICE, "%s", buf);
   }
   else
   {