300aad2
diff -up a2ps-4.14/lib/output.c.format-security a2ps-4.14/lib/output.c
300aad2
--- a2ps-4.14/lib/output.c.format-security	2013-12-03 15:49:51.675971847 +0000
300aad2
+++ a2ps-4.14/lib/output.c	2013-12-03 15:49:59.862013165 +0000
300aad2
@@ -525,7 +525,7 @@ output_file (struct output * out, a2ps_j
300aad2
 		     expand_user_string (job, FIRST_FILE (job),
300aad2
 					 (const uchar *) "Expand: requirement",
300aad2
 					 (const uchar *) token));
300aad2
-	output (dest, expansion);
300aad2
+	output (dest, "%s", expansion);
300aad2
 	continue;
300aad2
       }
300aad2