diff --git a/a2ps-format-security.patch b/a2ps-format-security.patch
new file mode 100644
index 0000000..d846589
--- /dev/null
+++ b/a2ps-format-security.patch
@@ -0,0 +1,12 @@
+diff -up a2ps-4.14/lib/output.c.format-security a2ps-4.14/lib/output.c
+--- a2ps-4.14/lib/output.c.format-security	2013-12-03 15:49:51.675971847 +0000
++++ a2ps-4.14/lib/output.c	2013-12-03 15:49:59.862013165 +0000
+@@ -525,7 +525,7 @@ output_file (struct output * out, a2ps_j
+ 		     expand_user_string (job, FIRST_FILE (job),
+ 					 (const uchar *) "Expand: requirement",
+ 					 (const uchar *) token));
+-	output (dest, expansion);
++	output (dest, "%s", expansion);
+ 	continue;
+       }
+ 
diff --git a/a2ps.spec b/a2ps.spec
index d99a2cd..eec76b6 100644
--- a/a2ps.spec
+++ b/a2ps.spec
@@ -1,7 +1,7 @@
 Summary: Converts text and other types of files to PostScript
 Name: a2ps
 Version: 4.14
-Release: 21%{?dist}
+Release: 22%{?dist}
 License: GPLv3+
 Group: Applications/Publishing
 Source0: http://ftp.gnu.org/gnu/a2ps/%{name}-%{version}.tar.gz
@@ -26,6 +26,7 @@ Patch15: a2ps-4.13b-tilde.patch
 Patch16: a2ps-bad-free.patch
 Patch17: a2ps-4.13-euckr.patch
 Patch18: a2ps-4.13-gnusource.patch
+Patch19: a2ps-format-security.patch
 Patch20: a2ps-4.13-hebrew.patch
 Patch26: a2ps-make-fonts-map.patch
 Patch28: a2ps-wdiff.patch
@@ -136,6 +137,9 @@ the emacs-%{name} package to use emacs-%{name} with GNU Emacs.
 # Prevent strsignal segfaulting (bug #104970).
 %patch18 -p1 -b .gnusource
 
+# Prevent build failure with -Wformat-security (bug #1036979).
+%patch19 -p1 -b .format-security
+
 # Hebrew support (bug #113191).
 %patch20 -p1 -b .hebrew
 
@@ -309,6 +313,9 @@ exit 0
 %{_emacs_sitelispdir}/%{name}/*.el
 
 %changelog
+* Tue Dec  3 2013 Tim Waugh <twaugh@redhat.com> - 4.14-22
+- Prevent build failure with -Werror=format-security (bug #1036979).
+
 * Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.14-21
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild