diff --git a/debian/patches/0002-format-security.patch b/debian/patches/0002-format-security.patch
new file mode 100644
index 0000000..ac9a3c9
--- /dev/null
+++ b/debian/patches/0002-format-security.patch
@@ -0,0 +1,24 @@
+Author: Daniel Baumann <mail@daniel-baumann.ch>
+Description: Using string literal to fix FTBFS with -Werror=format-security.
+
+diff -Naurp lziprecover.orig/main.cc lziprecover/main.cc
+--- lziprecover.orig/main.cc
++++ lziprecover/main.cc
+@@ -418,7 +418,7 @@ int decompress( const int infd, const Pr
+           }
+         retval = 2; break;
+         }
+-      if( verbosity >= 2 ) { std::fprintf( stderr, ok_msg ); pp.reset(); }
++      if( verbosity >= 2 ) { std::fprintf( stderr, "%s", ok_msg ); pp.reset(); }
+       }
+     }
+   catch( std::bad_alloc )
+@@ -427,7 +427,7 @@ int decompress( const int infd, const Pr
+     retval = 1;
+     }
+   catch( Error e ) { pp(); show_error( e.msg, errno ); retval = 1; }
+-  if( verbosity == 1 && retval == 0 ) std::fprintf( stderr, ok_msg );
++  if( verbosity == 1 && retval == 0 ) std::fprintf( stderr, "%s", ok_msg );
+   return retval;
+   }
+ 
diff --git a/debian/patches/series b/debian/patches/series
index 58cf314..86cb98b 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1 +1,2 @@
 0001-build.patch
+0002-format-security.patch