--- fvwm-2.6.5/libs/FRenderInit.c~	2013-05-05 08:55:11.555668251 +0200
+++ fvwm-2.6.5/libs/FRenderInit.c	2013-05-05 08:54:36.265666672 +0200
@@ -129,7 +129,7 @@
 		    code <= FRenderErrorBase +
 		    (sizeof(error_names) / sizeof(char *)) -1)
 		{
-			sprintf(msg, error_names[code - FRenderErrorBase]);
+			sprintf(msg, "%s", error_names[code - FRenderErrorBase]);
 			return 1;
 		}
 	}
--- fvwm-2.6.5/modules/FvwmIconMan/functions.c~	2007-01-27 12:33:16.000000000 +0100
+++ fvwm-2.6.5/modules/FvwmIconMan/functions.c	2013-05-05 11:22:41.200960493 +0200
@@ -535,7 +535,7 @@
 	else
 	{
 		sprintf(buf, "%s\n", s);
-		ConsoleMessage(buf);
+		ConsoleMessage("%s", buf);
 	}
 
 	return 0;
--- fvwm-2.6.5/fvwm/virtual.c~	2011-08-16 09:05:53.000000000 +0200
+++ fvwm-2.6.5/fvwm/virtual.c	2013-05-05 11:18:18.824282087 +0200
@@ -2020,9 +2020,9 @@
 			"The command EdgeResistance with three arguments is"
 			" obsolete. Please use the following commands"
 			" instead:");
-		fvwm_msg(OLD, "", cmd);
-		fvwm_msg(OLD, "", stylecmd);
-		fvwm_msg(OLD, "", stylecmd2);
+		fvwm_msg(OLD, "", "%s", cmd);
+		fvwm_msg(OLD, "", "%s", stylecmd);
+		fvwm_msg(OLD, "", "%s", stylecmd2);
 		execute_function(
 			cond_rc, exc, cmd,
 			FUNC_DONT_REPEAT | FUNC_DONT_EXPAND_COMMAND);
--- fvwm-2.6.5/fvwm/builtins.c~	2012-01-18 11:22:45.000000000 +0100
+++ fvwm-2.6.5/fvwm/builtins.c	2013-05-05 11:15:10.200940313 +0200
@@ -2682,7 +2682,7 @@
 			action[len-1]='\0';
 		}
 	}
-	fvwm_msg(ECHO,"Echo",action);
+	fvwm_msg(ECHO,"Echo","%s",action);
 
 	return;
 }
--- fvwm-2.6.5/fvwm/move_resize.c~	2011-09-30 11:00:53.000000000 +0200
+++ fvwm-2.6.5/fvwm/move_resize.c	2013-05-05 11:12:05.544265384 +0200
@@ -3038,7 +3038,7 @@
 		OLD, "CMD_SnapAttraction",
 		"The command SnapAttraction is obsolete. Please use the"
 		" following command instead:");
-	fvwm_msg(OLD, "", cmd);
+	fvwm_msg(OLD, "","%s", cmd);
 	execute_function(
 		cond_rc, exc, cmd,
 		FUNC_DONT_REPEAT | FUNC_DONT_EXPAND_COMMAND);
@@ -3060,7 +3060,7 @@
 		OLD, "CMD_SnapGrid",
 		"The command SnapGrid is obsolete. Please use the following"
 		" command instead:");
-	fvwm_msg(OLD, "", cmd);
+	fvwm_msg(OLD, "","%s", cmd);
 	execute_function(
 		cond_rc, exc, cmd,
 		FUNC_DONT_REPEAT | FUNC_DONT_EXPAND_COMMAND);