--- sa-exim.c.str 2009-03-28 20:16:37.000000000 +0100 +++ sa-exim.c 2009-03-28 20:16:52.000000000 +0100 @@ -1365,7 +1365,7 @@ * If you do teergrube an SSL connection with the current * code, you will break it, but that's acceptable */ str=string_sprintf(string_sprintf("451- %s\r\n",SAmsgteergrubewait), spamstatus); - fprintf(smtp_out, str); + fprintf(smtp_out, "%s", str); ret=fflush(smtp_out); if (ret != 0) {