diff -ur avfs-1.0.0.old/avfscoda/dispatch.c avfs-1.0.0/avfscoda/dispatch.c
--- avfs-1.0.0.old/avfscoda/dispatch.c	2012-03-22 18:29:17.000000000 +0000
+++ avfs-1.0.0/avfscoda/dispatch.c	2012-03-22 18:31:09.000000000 +0000
@@ -147,7 +147,7 @@
     va_end(ap);
 
     buf[LOGMSG_SIZE] = '\0';
-    syslog(LOG_INFO, buf);
+    syslog(LOG_INFO, "%s", buf);
     log(buf);
 }
 
Only in avfs-1.0.0/avfscoda: dispatch.c~
diff -ur avfs-1.0.0.old/modules/urar.c avfs-1.0.0/modules/urar.c
--- avfs-1.0.0.old/modules/urar.c	2012-03-22 18:29:17.000000000 +0000
+++ avfs-1.0.0/modules/urar.c	2012-03-22 18:30:33.000000000 +0000
@@ -587,7 +587,7 @@
     if(res < 0)
         return res;
 
-    fd = open(tmpfile, O_RDWR | O_CREAT | O_TRUNC);
+    fd = open(tmpfile, O_RDWR | O_CREAT | O_TRUNC,0644);
     if(fd == -1) {
         res = -errno; 
         av_log(AVLOG_ERROR, "RAR: Could not open %s: %s", tmpfile,
Only in avfs-1.0.0/modules: urar.c~
diff -ur avfs-1.0.0.old/src/sysdeps.c avfs-1.0.0/src/sysdeps.c
--- avfs-1.0.0.old/src/sysdeps.c	2012-03-22 18:29:17.000000000 +0000
+++ avfs-1.0.0/src/sysdeps.c	2012-03-22 18:31:34.000000000 +0000
@@ -209,7 +209,7 @@
     va_end(ap);
 
     if(logfile == NULL)
-        syslog(LOG_INFO, buf);
+        syslog(LOG_INFO, "%s", buf);
     else
         filelog(buf);
     AV_UNLOCK(loglock);
Only in avfs-1.0.0/src: sysdeps.c~
--- avfs-1.0.0/libneon/hip_xml.c.old	2012-03-23 15:36:04.000000000 +0000
+++ avfs-1.0.0/libneon/hip_xml.c	2012-03-23 15:36:20.000000000 +0000
@@ -40,7 +40,7 @@
 
 /******** Expat ***********/
 
-# include "xmlparse.h"
+# include "expat.h"
 typedef XML_Char hip_xml_char;
 
 #else /* not HAVE_EXPAT */