--- src/OVAL/probes/unix/linux/iflisteners.c.str	2012-01-15 14:17:03.000000000 +0100
+++ src/OVAL/probes/unix/linux/iflisteners.c	2012-01-15 14:17:29.000000000 +0100
@@ -340,7 +340,7 @@
 		fclose(fd);
 
 		if (ent_ifindex == ifindex) {
-			snprintf(interface->interface_name, sizeof interface->interface_name, d_ent->d_name);
+			snprintf(interface->interface_name, sizeof interface->interface_name, "%s", d_ent->d_name);
 			snprintf(buf, sizeof buf - 1, "/sys/class/net/%s/address", d_ent->d_name);
 			fd = fopen(buf, "rt");
 			if (fd == NULL) {
--- src/OVAL/probes/unix/shadow.c.str	2012-01-15 14:14:46.000000000 +0100
+++ src/OVAL/probes/unix/shadow.c	2012-01-15 14:16:17.000000000 +0100
@@ -126,7 +126,7 @@
 		if (*pwd != '$')
 			goto fail;
 
-		return SEXP_string_newf(mth_str);
+		return SEXP_string_newf("%s",mth_str);
 	default:
 		return SEXP_string_newf("DES");
 	}