diff --git a/xmlrpc-c-format-security-warning.patch b/xmlrpc-c-format-security-warning.patch
new file mode 100644
index 0000000..b8feb45
--- /dev/null
+++ b/xmlrpc-c-format-security-warning.patch
@@ -0,0 +1,13 @@
+diff --git a/src/xmlrpc_server_abyss.c b/src/xmlrpc_server_abyss.c
+index 614f64b..998290f 100644
+--- a/src/xmlrpc_server_abyss.c
++++ b/src/xmlrpc_server_abyss.c
+@@ -776,7 +776,7 @@ createServer(xmlrpc_env *                      const envP,
+         ServerInit2(abyssServerP, &error);
+ 
+         if (error) {
+-            xmlrpc_faultf(envP, error);
++            xmlrpc_faultf(envP, "%s", error);
+             xmlrpc_strfree(error);
+         }
+     }
diff --git a/xmlrpc-c.spec b/xmlrpc-c.spec
index 8822001..8ec3d38 100644
--- a/xmlrpc-c.spec
+++ b/xmlrpc-c.spec
@@ -6,7 +6,7 @@
 Summary:	A lightweight RPC library based on XML and HTTP
 Name:		xmlrpc-c
 Version:	1.32.5
-Release:	%release_func 1903.svn%svnrev
+Release:	%release_func 1904.svn%svnrev
 # See COPYING for details.
 # The Python 1.5.2 license used by a few files is just BSD.
 License:	BSD and MIT
@@ -28,6 +28,7 @@ Patch107:	xmlrpc-c-uninit-curl.patch
 Patch108:	xmlrpc-c-30x-redirect.patch
 Patch109:	xmlrpc-c-check-vasprintf-return-value.patch
 Patch110:	xmlrpc-c-include-string_int.h.patch
+Patch111:	xmlrpc-c-format-security-warning.patch
 
 
 BuildRoot:	%_tmppath/%name-%version-%release-root
@@ -123,6 +124,7 @@ This package contains some handy XML-RPC demo applications.
 %patch108 -p1
 %patch109 -p1
 %patch110 -p1
+%patch111 -p1
 
 ## not needed...
 rm doc/{INSTALL,configure_doc}
@@ -242,6 +244,10 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Fri Mar 28 2014 Mikolaj Izdebski <mizdebsk@redhat.com> - 1.32.5-1904.svn2451
+- Add patch to silence format-security compiler warning
+- Resolves: rhbz#1037399
+
 * Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.32.5-1903.svn2451
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild