diff --git a/CONTRIBUTORS b/CONTRIBUTORS
index dc62a36..2d4ef6b 100644
--- a/CONTRIBUTORS
+++ b/CONTRIBUTORS
@@ -90,6 +90,9 @@ Diego Pierotto
 micky979
   for providing French language texts
 
+Anssi Hannula
+  for fixing insecure format strings in LSTX handlers
+
 wirbel
   for pointing out that section filtering is optional for VDR devices
 
diff --git a/HISTORY b/HISTORY
index bfd49cd..2481999 100644
--- a/HISTORY
+++ b/HISTORY
@@ -1,6 +1,7 @@
 VDR Plugin 'streamdev' Revision History
 ---------------------------------------
 
+- fixed insecure format strings in LSTX handlers (thanks to Anssi Hannula)
 - updated Finish translation (thanks to Rolf Ahrenberg)
 - removed redefinitions in includes - caused problems in older compilers
 - fixed ts2ps.h defines
diff --git a/server/connectionVTP.c b/server/connectionVTP.c
index 0412d1f..f66bd45 100644
--- a/server/connectionVTP.c
+++ b/server/connectionVTP.c
@@ -1,5 +1,5 @@
 /*
- *  $Id: connectionVTP.c,v 1.18 2008/04/07 14:27:30 schmirl Exp $
+ *  $Id: connectionVTP.c,v 1.18.2.1 2009/07/17 06:25:56 schmirl Exp $
  */
  
 #include "server/connectionVTP.h"
@@ -157,7 +157,7 @@ bool cLSTEHandler::Next(bool &Last)
 		Last = true;
 		cString str(m_Error, true);
 		m_Error = NULL;
-		return m_Client->Respond(m_Errno, *str);
+		return m_Client->Respond(m_Errno, "%s", *str);
 	}
 
 	Last = false;
@@ -350,7 +350,7 @@ bool cLSTCHandler::Next(bool &Last)
 		Last = true;
 		cString str(m_Error, true);
 		m_Error = NULL;
-		return m_Client->Respond(m_Errno, *str);
+		return m_Client->Respond(m_Errno, "%s", *str);
 	}
 
 	int number;
@@ -446,7 +446,7 @@ bool cLSTTHandler::Next(bool &Last)
 		Last = true;
 		cString str(m_Error, true);
 		m_Error = NULL;
-		return m_Client->Respond(m_Errno, *str);
+		return m_Client->Respond(m_Errno, "%s", *str);
 	}
 
 	bool result;