Michał Gizowski has found remote DoS in net-im/kadu. More information: http://www.security.nnov.ru/Kdocument422.html. I've just added kadu-0.4.3 to portage, which fixes this bug. We need to push it stable.
If it's true format string, it should allow more than just DoS...
x86 stable, thanks to muchar for helping me test it.
amd64 done
Marked ppc stable.
all archs done. closing
Reopening for GLSA decision. I tend to vote no.
That's not format string, hence the DoS-only thing. Voting no and closing without GLSA, feel free to rteopen if you intended to vote yes.