--- mozilla/js/src/xpconnect/shell/xpcshell.cpp.str	2008-12-31 09:50:25.000000000 -0500
+++ mozilla/js/src/xpconnect/shell/xpcshell.cpp	2008-12-31 09:50:47.000000000 -0500
@@ -542,7 +542,7 @@
 #endif
     {
         char line[256];
-        fprintf(gOutFile, prompt);
+        fprintf(gOutFile, "%s", prompt);
         fflush(gOutFile);
         if (!fgets(line, sizeof line, file))
             return JS_FALSE;
--- mozilla/widget/src/gtk2/nsFilePicker.cpp.str	2008-12-31 10:07:33.000000000 -0500
+++ mozilla/widget/src/gtk2/nsFilePicker.cpp	2008-12-31 10:07:50.000000000 -0500
@@ -480,6 +480,7 @@
                                   GTK_DIALOG_DESTROY_WITH_PARENT,
                                   GTK_MESSAGE_QUESTION,
                                   GTK_BUTTONS_YES_NO,
+				  "%s",
                                   NS_ConvertUTF16toUTF8(message).get());
   gtk_window_set_title(GTK_WINDOW(dialog), NS_ConvertUTF16toUTF8(title).get());
   if (parent_window && parent_window->group) {