A change was committed for unpaper upstream:
as a result of Debian concerns over sprintf behaviour with -D_FORTIFY_SOURCE=2:
Added as a blocker for bug 259417.
PS Off-topic, but when compiling setting -D TIMESTAMP=$(date +"%F %T") allows unpaper -V to report the build time.
This should be fixed in my 0.4, instead.