diff -up bar-1.10.9/args.c.format-security bar-1.10.9/args.c
--- bar-1.10.9/args.c.format-security	2014-06-12 16:01:36.990747232 -0400
+++ bar-1.10.9/args.c	2014-06-12 16:04:20.065747232 -0400
@@ -587,7 +587,7 @@ void help(FILE *out)
 			fprintf(out, "\n       ");
 			screen_used = 7;
 		}
-		fprintf(out, option_buffer);
+		fprintf(out, "%s", option_buffer);
 		screen_used += strlen(option_buffer);
 	}
 
@@ -615,7 +615,7 @@ void help(FILE *out)
 			fprintf(out, "\n       ");
 			screen_used = 7;
 		}
-		fprintf(out, option_buffer);
+		fprintf(out, "%s", option_buffer);
 		screen_used += strlen(option_buffer);
 	}
 
diff -up bar-1.10.9/display.c.format-security bar-1.10.9/display.c
--- bar-1.10.9/display.c.format-security	2007-06-06 15:07:41.000000000 -0400
+++ bar-1.10.9/display.c	2014-06-12 16:03:29.713747232 -0400
@@ -308,10 +308,10 @@ void displayAnsi(char *fg, char *bg, int
 {
 	if (d.display_ansi) {
 		if (fg != 0) {
-			fprintf(stderr, fg);
+			fprintf(stderr, "%s", fg);
 		}
 		if (bg != 0) {
-			fprintf(stderr, bg);
+			fprintf(stderr, "%s", bg);
 		}
 		if (b) {
 			fprintf(stderr, "");
@@ -702,7 +702,7 @@ int displayEnd(void)
 
 	fprintf(stderr, "\n");
 	if (d.display_summary) {
-		fprintf(stderr, "Copied: %llu%s (%.1f%s)",
+		fprintf(stderr, "Copied: %lu%s (%.1f%s)",
 			UINT64_CTYPE(total_count),
 			total_count_units,
 			short_count,
@@ -732,7 +732,7 @@ int displayEnd(void)
 		fprintf(stderr, "\n");
 
 		if ((hours != 0) || (minutes != 0) || (seconds != 0)) {
-			fprintf(stderr, "Throughput: %llu%s (%.1f%s)\n\n",
+			fprintf(stderr, "Throughput: %lu%s (%.1f%s)\n\n",
 				UINT64_CTYPE(total_throughput),
 				total_throughput_units,
 				short_throughput,