https://rt.cpan.org/Public/Bug/Display.html?id=48445
--- Proc-ProcessTable-0.45/os/Linux.c
+++ Proc-ProcessTable-0.45/os/Linux.c
@@ -397,7 +397,7 @@
 
     /* copy the path onto our obstack, set the value (somewhere in pts)
      * and free the results of canonicalize_file_name */
-    obstack_printf(mem_pool, link);
+    obstack_printf(mem_pool, "%s", link);
     obstack_1grow(mem_pool, '\0');
 
     *ptr = (char *) obstack_finish(mem_pool);
@@ -618,7 +618,7 @@
         bzero(prs, sizeof(struct procstat));
 
         /* intilize the format string */
-        obstack_printf(&mem_pool, get_string(STR_DEFAULT_FORMAT));
+        obstack_printf(&mem_pool, "%s", get_string(STR_DEFAULT_FORMAT));
         obstack_1grow(&mem_pool, '\0');
         format_str = (char *) obstack_finish(&mem_pool);
 
--- Proc-ProcessTable-0.45/ProcessTable.xs
+++ Proc-ProcessTable-0.45/ProcessTable.xs
@@ -388,5 +388,5 @@
      char* error;
 
      if( (error = OS_initialize()) != NULL ){
-       croak(error);
+       croak("%s", error);
      }