--- backend/avision.c.str	2009-04-06 14:51:43.000000000 +0200
+++ backend/avision.c	2009-04-06 14:52:28.000000000 +0200
@@ -1138,7 +1138,7 @@
 {
   size_t i;
   
-  DBG (dbg_level, info);
+  DBG (dbg_level, "%s", info);
   for (i = 0; i < count; ++ i) {
     DBG (dbg_level, "  [%lu] %1d%1d%1d%1d%1d%1d%1d%1db %3oo %3dd %2xx\n",
 	 (u_long) i,
@@ -1154,7 +1154,7 @@
   int address = 0;
   char text [16*3+1];
 
-  DBG (dbg_level, info);
+  DBG (dbg_level, "%s", info);
   while (count) {
     char* t = text;
     int i = 0;
--- backend/niash.c.str	2009-04-06 14:55:27.000000000 +0200
+++ backend/niash.c	2009-04-06 14:55:47.000000000 +0200
@@ -1112,7 +1112,7 @@
               if ((SANE_GAMMA_SIZE / 16) && (i % (SANE_GAMMA_SIZE / 16)) == 0)
                 {
                   strcat (szTable, "\n");
-                  DBG (DBG_MSG, szTable);
+                  DBG (DBG_MSG, "%s", szTable);
                   strcpy (szTable, "");
                 }
               /* test for number print */
@@ -1125,7 +1125,7 @@
           if (strlen (szTable))
             {
               strcat (szTable, "\n");
-              DBG (DBG_MSG, szTable);
+              DBG (DBG_MSG, "%s", szTable);
             }
           break;
 
--- frontend/scanimage.c.str	2009-04-06 14:57:54.000000000 +0200
+++ frontend/scanimage.c	2009-04-06 14:58:16.000000000 +0200
@@ -1790,7 +1790,7 @@
 				printf (start, int_arg);
 				break;
 			      case 0:
-				printf (start);
+				printf ("%s", start);
 				break;
 			      }
 			    *percent = cc;
@@ -1804,7 +1804,7 @@
 			  }
 		      }
 		    if (*start)
-		      printf (start);
+		      printf ("%s", start);
 		  }
 	      }
 	    if (i == 0 && ch != 'f')