--- iptraf-ng-1.1.3.1/src/ipfilter.c~	2012-05-23 11:17:02.000000000 +0000
+++ iptraf-ng-1.1.3.1/src/ipfilter.c	2012-11-29 00:46:20.235279739 +0000
@@ -136,7 +136,7 @@
 				snprintf(msgstr, 60,
 					 "Invalid protocol input at or near token \"%s\"",
 					 bptr);
-				tui_error(ANYKEY_MSG, msgstr);
+				tui_error(ANYKEY_MSG, "%s", msgstr);
 				doagain = 1;
 			} else
 				doagain = 0;
--- iptraf-ng-1.1.3.1/src/othptab.c~	2012-05-23 11:17:02.000000000 +0000
+++ iptraf-ng-1.1.3.1/src/othptab.c	2012-11-29 00:48:27.768151755 +0000
@@ -430,7 +430,7 @@
 				break;
 			}
 
-			sprintf(scratchpad, rarp_mac_addr);
+			sprintf(scratchpad, "%s", rarp_mac_addr);
 			strcat(msgstring, scratchpad);
 			wattrset(table->othpwin, ARPATTR);
 			break;
@@ -505,7 +505,7 @@
 		wattrset(table->othpwin, UNKNIPATTR);
 		protptr = getprotobynumber(entry->protocol);
 		if (protptr != NULL) {
-			sprintf(protname, protptr->p_aliases[0]);
+			sprintf(protname, "%s", protptr->p_aliases[0]);
 		} else {
 			sprintf(protname, "IP protocol");
 			unknown = 1;