--- mc-4.6.2-pre1/src/cmd.c
+++ mc-4.6.2-pre1/src/cmd.c
@@ -1229,7 +1229,7 @@
     sync_profiles ();
     str = g_strconcat ( _(" Setup saved to ~/"), PROFILE_NAME, (char *) NULL);
     
-    message (0, _(" Setup "), str);
+    message (0, _(" Setup "), "%s", str);
     g_free (str);
 }
 
--- mc-4.6.2-pre1/src/hotlist.c
+++ mc-4.6.2-pre1/src/hotlist.c
@@ -1475,7 +1475,7 @@
 	    msg = g_strconcat (_("MC was unable to write ~/"), HOTLIST_FILENAME,
 				_(" file, your old hotlist entries were not deleted"), (char *) NULL);
 
-	    message (D_ERROR, _(" Hotlist Load "), msg);
+	    message (D_ERROR, _(" Hotlist Load "), "%s", msg);
 	    g_free (msg);
 	}
     } else {
--- mc-4.6.2-pre1/vfs/smbfs.c
+++ mc-4.6.2-pre1/vfs/smbfs.c
@@ -566,7 +566,7 @@
     if (p)
         my_remote = p;   /* strip off share/service name */
     /* create remote filename as understood by smb clientgen */
-    result = g_strconcat (my_remote, trailing_asterik ? "/*" : "", 0);
+    result = g_strconcat (my_remote, trailing_asterik ? "/*" : "", (char *) NULL);
     unix_to_dos (result, /* inplace = */ 1); /* code page conversion */
     str_replace(result, '/', '\\');
     return result;