diff --git a/allegro-4.2.3-pack-formatstring.patch b/allegro-4.2.3-pack-formatstring.patch
new file mode 100644
index 0000000..ea6188f
--- /dev/null
+++ b/allegro-4.2.3-pack-formatstring.patch
@@ -0,0 +1,12 @@
+diff -up allegro-4.2.3/tools/pack.c~ allegro-4.2.3/tools/pack.c
+--- allegro-4.2.3/tools/pack.c~	2006-05-20 16:49:58.000000000 +0200
++++ allegro-4.2.3/tools/pack.c	2010-12-30 11:20:42.425231307 +0100
+@@ -42,7 +42,7 @@ static void err(char *s1, char *s2)
+       printf(": %s", s1);
+ 
+    if (s2)
+-      printf(s2);
++      printf("%s", s2);
+ 
+    printf("\n");
+ 
diff --git a/allegro.spec b/allegro.spec
index ea631c5..88fc918 100644
--- a/allegro.spec
+++ b/allegro.spec
@@ -1,6 +1,6 @@
 Name:           allegro
 Version:        4.2.3
-Release:        3%{?dist}
+Release:        4%{?dist}
 
 Summary:        A game programming library
 Summary(es):    Una libreria de programacion de juegos
@@ -20,6 +20,7 @@ Patch5:         allegro-4.2.1-noexecmod.patch
 Patch6:         allegro-4.0.3-libdir.patch
 Patch7:         allegro-4.2.2-fullscreen-viewport.patch
 Patch8:         allegro-4.2.3-make.patch
+Patch9:         allegro-4.2.3-pack-formatstring.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildRequires:  esound-devel, texinfo, perl, arts-devel, glib2-devel
 BuildRequires:  xorg-x11-proto-devel, libX11-devel, libXext-devel, libXt-devel
@@ -164,6 +165,7 @@ sound through JACK (Jack Audio Connection Kit).
 %patch6 -p1 -z .multilib2
 %patch7 -p1 -z .fs-viewport
 %patch8 -p1
+%patch9 -p1
 iconv -f iso-8859-1 -t utf-8 docs/src/allegro._tx > docs/src/allegro._tx.tmp
 mv docs/src/allegro._tx.tmp docs/src/allegro._tx
 
@@ -292,6 +294,10 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Fri Jan  7 2011 Hans de Goede <hdegoede@redhat.com> 4.2.3-4
+- Fix a format string bug in the pack utility reported on bugtraq
+  (but without security implications)
+
 * Thu Sep  9 2010 Hans de Goede <hdegoede@redhat.com> 4.2.3-3
 - Fix FTBFS (#631099)