As it is in summary. Xfburn-0.4.0 Here's the patch which solves this http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/xfburn/current/SOURCES/xfburn-0.4.0-format_not_a_string_literal_and_no_format_arguments.patch
Thanks for the patch. The strings in question were not user supplied, so there was no real security issue. But obviously it's good to make the compiler happy :-D. Applied in r6469.