diff -ur alpine-2.00.orig/alpine/mailcmd.c alpine-2.00/alpine/mailcmd.c
--- alpine-2.00.orig/alpine/mailcmd.c	2008-08-22 00:14:45.000000000 +0200
+++ alpine-2.00/alpine/mailcmd.c	2009-01-10 18:54:48.000000000 +0100
@@ -7873,7 +7873,7 @@
 
 	      case 13 :			/* Match my addresses */
 		me++;
-		snprintf(sstring, sizeof(sstring), not ? _(dont_match_me) : _(match_me));
+		snprintf(sstring, sizeof(sstring), "%s", not ? _(dont_match_me) : _(match_me));
 		continue;
 
 	      case 14 :			/* Subject: default */
Only in alpine-2.00/alpine: mailcmd.c~
diff -ur alpine-2.00.orig/pith/ldap.c alpine-2.00/pith/ldap.c
--- alpine-2.00.orig/pith/ldap.c	2008-04-08 00:58:40.000000000 +0200
+++ alpine-2.00/pith/ldap.c	2009-01-10 18:45:57.000000000 +0100
@@ -778,40 +778,40 @@
 	 */
 	switch(args){
 	  case 0:
-	    snprintf(filter, sizeof(filter), filt_format);
+	    snprintf(filter, sizeof(filter), "%s", filt_format);
 	    break;
 	  case 1:
-	    snprintf(filter, sizeof(filter), filt_format, scp);
+	    snprintf(filter, sizeof(filter), "%s", filt_format, scp);
 	    break;
 	  case 2:
-	    snprintf(filter, sizeof(filter), filt_format, scp, scp);
+	    snprintf(filter, sizeof(filter), "%s", filt_format, scp, scp);
 	    break;
 	  case 3:
-	    snprintf(filter, sizeof(filter), filt_format, scp, scp, scp);
+	    snprintf(filter, sizeof(filter), "%s", filt_format, scp, scp, scp);
 	    break;
 	  case 4:
-	    snprintf(filter, sizeof(filter), filt_format, scp, scp, scp, scp);
+	    snprintf(filter, sizeof(filter), "%s", filt_format, scp, scp, scp, scp);
 	    break;
 	  case 5:
-	    snprintf(filter, sizeof(filter), filt_format, scp, scp, scp, scp, scp);
+	    snprintf(filter, sizeof(filter), "%s", filt_format, scp, scp, scp, scp, scp);
 	    break;
 	  case 6:
-	    snprintf(filter, sizeof(filter), filt_format, scp, scp, scp, scp, scp, scp);
+	    snprintf(filter, sizeof(filter), "%s", filt_format, scp, scp, scp, scp, scp, scp);
 	    break;
 	  case 7:
-	    snprintf(filter, sizeof(filter), filt_format, scp, scp, scp, scp, scp, scp, scp);
+	    snprintf(filter, sizeof(filter), "%s", filt_format, scp, scp, scp, scp, scp, scp, scp);
 	    break;
 	  case 8:
-	    snprintf(filter, sizeof(filter), filt_format, scp, scp, scp, scp, scp, scp, scp,
+	    snprintf(filter, sizeof(filter), "%s", filt_format, scp, scp, scp, scp, scp, scp, scp,
 		    scp);
 	    break;
 	  case 9:
-	    snprintf(filter, sizeof(filter), filt_format, scp, scp, scp, scp, scp, scp, scp,
+	    snprintf(filter, sizeof(filter), "%s", filt_format, scp, scp, scp, scp, scp, scp, scp,
 		    scp, scp);
 	    break;
 	  case 10:
 	  default:
-	    snprintf(filter, sizeof(filter), filt_format, scp, scp, scp, scp, scp, scp, scp,
+	    snprintf(filter, sizeof(filter), "%s", filt_format, scp, scp, scp, scp, scp, scp, scp,
 		    scp, scp, scp);
 	    break;
 	}
Only in alpine-2.00/pith: ldap.c~