diff --git a/0001-libtracker-data-Fix-build-with-format-security-flag.patch b/0001-libtracker-data-Fix-build-with-format-security-flag.patch
new file mode 100644
index 0000000..734230d
--- /dev/null
+++ b/0001-libtracker-data-Fix-build-with-format-security-flag.patch
@@ -0,0 +1,35 @@
+From 0ebfbc8a85613310d6c833031578e8bca9d8dccc Mon Sep 17 00:00:00 2001
+From: Tim Lunn <tim@feathertop.org>
+Date: Mon, 3 Sep 2018 11:25:05 +1000
+Subject: [PATCH] libtracker-data: Fix build with format-security flag
+
+Closes:https://gitlab.gnome.org/GNOME/tracker/issues/34
+---
+ src/libtracker-data/tracker-data-manager.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/libtracker-data/tracker-data-manager.c b/src/libtracker-data/tracker-data-manager.c
+index 06012b427c..e2db6e35e2 100644
+--- a/src/libtracker-data/tracker-data-manager.c
++++ b/src/libtracker-data/tracker-data-manager.c
+@@ -2934,7 +2934,7 @@ create_insert_delete_triggers (TrackerDBInterface  *iface,
+ 
+ 	g_string_append (trigger_query, "END; ");
+ 	tracker_db_interface_execute_query (iface, &internal_error,
+-	                                    trigger_query->str);
++	                                    "%s", trigger_query->str);
+ 	g_string_free (trigger_query, TRUE);
+ 
+ 	if (internal_error) {
+@@ -2967,7 +2967,7 @@ create_insert_delete_triggers (TrackerDBInterface  *iface,
+ 
+ 	g_string_append (trigger_query, "END; ");
+ 	tracker_db_interface_execute_query (iface, &internal_error,
+-	                                    trigger_query->str);
++	                                    "%s", trigger_query->str);
+ 	g_string_free (trigger_query, TRUE);
+ 
+ 	if (internal_error) {
+-- 
+2.17.1
+
diff --git a/tracker.spec b/tracker.spec
index 5b0fe99..b1c3264 100644
--- a/tracker.spec
+++ b/tracker.spec
@@ -10,6 +10,8 @@ Summary:        Desktop-neutral metadata database and search tool
 License:        GPLv2+
 URL:            https://wiki.gnome.org/Projects/Tracker
 Source0:        https://download.gnome.org/sources/%{name}/2.1/%{name}-%{version}.tar.xz
+# Fix the build
+Patch0:         0001-libtracker-data-Fix-build-with-format-security-flag.patch
 
 BuildRequires:  graphviz
 BuildRequires:  gtk-doc
@@ -76,7 +78,7 @@ This package contains the documentation for tracker
 
 
 %prep
-%setup -q
+%autosetup -p1
 
 %if 0%{?rhel}
 # Fix the build with sqlite 3.7 that doesn't support SQLITE_DETERMINISTIC