--- openvpn-2.1_rc20/push.c	2009-10-01 14:35:38.000000000 -0500
+++ openvpn-2.1_rc20.dlucio/push.c	2009-10-05 14:46:18.180081616 -0500
@@ -177,7 +177,7 @@
   const int extra = 64; /* extra space for possible trailing ifconfig and push-continuation */
   const int safe_cap = BCAP (&buf) - extra;
 
-  buf_printf (&buf, cmd);
+  buf_printf (&buf, "%s", cmd);
 
   while (e)
     {
@@ -193,7 +193,7 @@
 		  goto fail;
 		multi_push = true;
 		buf_reset_len (&buf);
-		buf_printf (&buf, cmd);
+		buf_printf (&buf, "%s", cmd);
 	      }
 	    }
 	  if (BLEN (&buf) + l >= safe_cap)