diff --git a/recipes-extended/qhull/qhull/0001-testqset-fix-build-with-conf-distro-include-security.patch b/recipes-extended/qhull/qhull/0001-testqset-fix-build-with-conf-distro-include-security.patch
new file mode 100644
index 0000000..cef8b09
--- /dev/null
+++ b/recipes-extended/qhull/qhull/0001-testqset-fix-build-with-conf-distro-include-security.patch
@@ -0,0 +1,32 @@
+From d4489d05dadf025ac1f84b3a76a0979dcfbd2bec Mon Sep 17 00:00:00 2001
+From: Martin Jansa <Martin.Jansa@gmail.com>
+Date: Mon, 9 Apr 2018 21:45:24 +0000
+Subject: [PATCH] testqset: fix build with
+ conf/distro/include/security_flags.inc
+
+* fixes:
+  http://errors.yoctoproject.org/Errors/Details/174716/
+  qhull/2012.1-r0/qhull-2012.1/src/testqset/testqset.c:217:9: error: format not a string literal and no format arguments [-Werror=format-security]
+         printf(promptstr);
+         ^~~~~~
+
+Upstream-Status: Pending
+
+Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
+---
+ src/testqset/testqset.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/testqset/testqset.c b/src/testqset/testqset.c
+index 2bdcf17..309d3bf 100644
+--- a/src/testqset/testqset.c
++++ b/src/testqset/testqset.c
+@@ -214,7 +214,7 @@ void readOptions(int argc, char **argv, const char *promptstr, int *numInts, int
+     char *endp;
+ 
+     if (argc != 2 && argc != 3) {
+-        printf(promptstr);
++        printf("%s", promptstr);
+         exit(0);
+     }
+     numIntsArg= strtol(argv[1], &endp, 10);
diff --git a/recipes-extended/qhull/qhull_2012.1.bb b/recipes-extended/qhull/qhull_2012.1.bb
index c4d00b9..63ff4d5 100644
--- a/recipes-extended/qhull/qhull_2012.1.bb
+++ b/recipes-extended/qhull/qhull_2012.1.bb
@@ -4,7 +4,9 @@ SECTION = "libs"
 LICENSE = "qhull"
 LIC_FILES_CHKSUM = "file://COPYING.txt;md5=4d4e8c0754b225e2c78cfdd911e8b09e"
 
-SRC_URI = "http://www.qhull.org/download/qhull-${PV}-src.tgz"
+SRC_URI = "http://www.qhull.org/download/qhull-${PV}-src.tgz \
+    file://0001-testqset-fix-build-with-conf-distro-include-security.patch \
+"
 SRC_URI[md5sum] = "d0f978c0d8dfb2e919caefa56ea2953c"
 SRC_URI[sha256sum] = "a35ecaa610550b7f05c3ce373d89c30cf74b059a69880f03080c556daebcff88"