diff -up a2ps-4.14/lib/output.c.format-security a2ps-4.14/lib/output.c
--- a2ps-4.14/lib/output.c.format-security 2013-12-03 15:49:51.675971847 +0000
+++ a2ps-4.14/lib/output.c 2013-12-03 15:49:59.862013165 +0000
@@ -525,7 +525,7 @@ output_file (struct output * out, a2ps_j
expand_user_string (job, FIRST_FILE (job),
(const uchar *) "Expand: requirement",
(const uchar *) token));
- output (dest, expansion);
+ output (dest, "%s", expansion);
continue;
}