+--- a2ps-4.14/lib/output.c~ 2015-04-01 22:07:29.000000000 +0200
++++ a2ps-4.14/lib/output.c 2015-04-01 22:08:53.825344087 +0200
+@@ -525,7 +525,7 @@
+ expand_user_string (job, FIRST_FILE (job),
+ (const uchar *) "Expand: requirement",
+ (const uchar *) token));
+- output (dest, expansion);
++ output (dest, "%s", expansion);
+ continue;
+ }
+
+--- a2ps-4.14/lib/psgen.c~ 2007-12-29 02:58:22.000000000 +0100
++++ a2ps-4.14/lib/psgen.c 2015-04-01 22:09:36.668677711 +0200
+@@ -232,7 +232,7 @@
+ default:
+ *buf = '\0';
+ ps_escape_char (job, cp[i], buf);
+- output (jdiv, (char *) buf);
++ output (jdiv, "%s", (char *) buf);
+ break;
+ }
+ }
+--- a2ps-4.14/lib/parseppd.y~ 2007-12-29 02:58:21.000000000 +0100
++++ a2ps-4.14/lib/parseppd.y 2015-04-01 22:12:11.502012094 +0200
+@@ -154,7 +154,7 @@
+ void
+ yyerror (const char *msg)
+ {
+- error_at_line (1, 0, ppdfilename, ppdlineno, msg);
++ error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
+ }
+
+ /*
+--- a2ps-4.14/src/parsessh.y~ 2007-12-29 02:58:35.000000000 +0100
++++ a2ps-4.14/src/parsessh.y 2015-04-01 22:12:50.782012360 +0200
+@@ -740,7 +740,7 @@
+ void
+ yyerror (const char *msg)
+ {
+- error_at_line (1, 0, sshfilename, sshlineno, msg);
++ error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
+ }
+
+ /*