--- libreport-2.3.0/src/plugins/reporter-ureport.c.orig	2014-10-12 21:30:27.836212240 +0200
+++ libreport-2.3.0/src/plugins/reporter-ureport.c	2014-10-12 21:42:03.026183064 +0200
@@ -246,7 +246,7 @@
         {
             log(_("This problem has already been reported."));
             if (response->urr_message)
-                log(response->urr_message);
+                log("%s", response->urr_message);
 
             ret = EXIT_STOP_EVENT_RUN;
         }
--- libreport-2.2.2/src/gui-wizard-gtk/wizard.c.orig	2014-04-20 22:07:04.000000000 +0200
+++ libreport-2.2.2/src/gui-wizard-gtk/wizard.c	2014-06-14 17:08:36.638269706 +0200
@@ -1935,7 +1935,7 @@
         GTK_DIALOG_MODAL | GTK_DIALOG_DESTROY_WITH_PARENT,
         GTK_MESSAGE_WARNING,
         GTK_BUTTONS_YES_NO,
-        message);
+        "%s", message);
 
     gtk_window_set_transient_for(GTK_WINDOW(old_private_group), GTK_WINDOW(g_wnd_assistant));
     gtk_message_dialog_set_markup(GTK_MESSAGE_DIALOG(old_private_group),
@@ -3118,7 +3118,7 @@
                 GTK_DIALOG_MODAL | GTK_DIALOG_DESTROY_WITH_PARENT,
                 GTK_MESSAGE_WARNING,
                 GTK_BUTTONS_CLOSE,
-                message);
+                "%s", message);
             free(message);
             gtk_window_set_transient_for(GTK_WINDOW(dlg), GTK_WINDOW(g_wnd_assistant));
             gtk_dialog_run(GTK_DIALOG(dlg));
--- libreport-2.3.0/src/plugins/reporter-rhtsupport.c.orig	2014-10-02 10:51:43.000000000 +0200
+++ libreport-2.3.0/src/plugins/reporter-rhtsupport.c	2014-10-12 21:46:04.766172924 +0200
@@ -205,7 +205,7 @@
         ureport_server_response_save_in_dump_dir(resp, dump_dir_name, conf);
 
         if (resp->urr_message)
-            log(resp->urr_message);
+            log("%s", resp->urr_message);
     }
     else if (g_verbose > 2)
         error_msg(_("Server responded with an error: '%s'"), resp->urr_value);