diff -ur hplip-2.8.12-orig/pcard/ptest.c hplip-2.8.12/pcard/ptest.c
--- hplip-2.8.12-orig/pcard/ptest.c	2008-12-17 21:40:19.000000000 +0100
+++ hplip-2.8.12/pcard/ptest.c	2008-12-23 18:45:17.000000000 +0100
@@ -78,8 +78,8 @@
    if ((n = vsnprintf(buf, 256, fmt, args)) == -1)
       buf[255] = 0;     /* output was truncated */
 
-   fprintf(stderr, buf);
-   syslog(LOG_WARNING, buf);
+   fprintf(stderr, "%s", buf);
+   syslog(LOG_WARNING, "%s", buf);
 
    fflush(stderr);
    va_end(args);
diff -ur hplip-2.8.12-orig/prnt/backend/hp.c hplip-2.8.12/prnt/backend/hp.c
--- hplip-2.8.12-orig/prnt/backend/hp.c	2008-12-17 21:39:37.000000000 +0100
+++ hplip-2.8.12/prnt/backend/hp.c	2008-12-23 18:39:26.000000000 +0100
@@ -149,8 +149,8 @@
    if ((n = vsnprintf(buf, 256, fmt, args)) == -1)
       buf[255] = 0;     /* output was truncated */
 
-   fprintf(stderr, buf);
-   syslog(LOG_ERR, buf);
+   fprintf(stderr, "%s", buf);
+   syslog(LOG_ERR, "%s", buf);
 
    fflush(stderr);
    va_end(args);
diff -ur hplip-2.8.12-orig/prnt/hpijs/hpijs.cpp hplip-2.8.12/prnt/hpijs/hpijs.cpp
--- hplip-2.8.12-orig/prnt/hpijs/hpijs.cpp	2008-12-17 21:39:43.000000000 +0100
+++ hplip-2.8.12/prnt/hpijs/hpijs.cpp	2008-12-23 18:32:05.000000000 +0100
@@ -76,8 +76,8 @@
    if ((n = vsnprintf(buf, 256, fmt, args)) == -1)
       buf[255] = 0;     /* output was truncated */
 
-   fprintf(stderr, buf);
-   syslog(LOG_WARNING, buf);
+   fprintf(stderr, "%s", buf);
+   syslog(LOG_WARNING, "%s", buf);
 
    fflush(stderr);
    va_end(args);
@@ -466,7 +466,7 @@
    }
    else if (!strcmp (key, "ColorSpace"))
    {
-      return snprintf(value_buf, value_size, pSS->ph.cs);
+      return snprintf(value_buf, value_size, "%s", pSS->ph.cs);
    }
    else if (!strcmp (key, "PageImageFormat"))
    {
diff -ur hplip-2.8.12-orig/prnt/hpijs/hpijsfax.cpp hplip-2.8.12/prnt/hpijs/hpijsfax.cpp
--- hplip-2.8.12-orig/prnt/hpijs/hpijsfax.cpp	2008-12-17 21:39:43.000000000 +0100
+++ hplip-2.8.12/prnt/hpijs/hpijsfax.cpp	2008-12-23 18:35:57.000000000 +0100
@@ -236,7 +236,7 @@
 	}
 	else if (!strcmp (key, "ColorSpace"))
 	{
-		return snprintf (value_buf, value_size, pFaxStruct->ph.cs);
+		return snprintf (value_buf, value_size, "%s", pFaxStruct->ph.cs);
 	}
 	else if (!strcmp (key, "PageImageFormat"))
 	{
diff -ur hplip-2.8.12-orig/scan/sane/common.c hplip-2.8.12/scan/sane/common.c
--- hplip-2.8.12-orig/scan/sane/common.c	2008-12-17 21:40:16.000000000 +0100
+++ hplip-2.8.12/scan/sane/common.c	2008-12-23 18:30:18.000000000 +0100
@@ -44,8 +44,8 @@
    va_start(args, fmt);
    if ((n = vsnprintf(buf, 256, fmt, args)) == -1)
       buf[255] = 0;     /* output was truncated */
-   syslog(LOG_WARNING, buf);
-   DBG(2, buf);
+   syslog(LOG_WARNING, "%s", buf);
+   DBG(2, "%s", buf);
    va_end(args);
    return n;
 }