Plug pub format_... security bug (only on glibc).