Patch from debian: http://patch-tracker.debian.org/package/eperl/2.2.14-16 Fixes format string expansion in stderr output of perl. (Closes: #397536) Index: eperl/eperl_perl5.c =================================================================== --- eperl.orig/eperl_perl5.c 2010-06-06 02:01:39.000000000 +0200 +++ eperl/eperl_perl5.c 2010-06-06 02:01:45.000000000 +0200 @@ -213,7 +213,7 @@ IO_restore_stdout(); IO_restore_stderr(); if ((cpBuf = ePerl_ReadErrorFile(perlstderr, perlscript, source)) != NULL) { - fprintf(stderr, cpBuf); + fprintf(stderr, "%s", cpBuf); } CU(EX_FAIL); }