diff --git a/contrib/src/gnutls/format-security.patch b/contrib/src/gnutls/format-security.patch
new file mode 100644
index 0000000000000000000000000000000000000000..f61b39b20605f08f29a9f2b670985f03634cf1b0
--- /dev/null
+++ b/contrib/src/gnutls/format-security.patch
@@ -0,0 +1,18 @@
+diff -rU0 gnutls-old/lib/x509/output.c gnutls/lib/x509/output.c
+--- gnutls-old/lib/x509/output.c
++++ gnutls/lib/x509/output.c
+@@ -1140 +1140 @@
+-					addf(str, _("\t\tP: "));
++					adds(str, _("\t\tP: "));
+@@ -1145 +1145 @@
+-					addf(str, _("\t\tQ: "));
++					adds(str, _("\t\tQ: "));
+@@ -1150 +1150 @@
+-					addf(str, _("\t\tG: "));
++					adds(str, _("\t\tG: "));
+diff -rU0 gnutls-old/lib/x509/ocsp_output.c gnutls/lib/x509/ocsp_output.c
+--- gnutls-old/lib/x509/ocsp_output.c
++++ gnutls/lib/x509/ocsp_output.c
+@@ -291 +291 @@
+-					addf(str, _("\tResponder Key ID: "));
++					adds(str, _("\tResponder Key ID: "));
diff --git a/contrib/src/gnutls/rules.mak b/contrib/src/gnutls/rules.mak
index 1cb56a75d792b7406f266a877ec64299a2df4bd4..c13d5dea028c09cac4a4d5e6b74600f02701cf0c 100644
--- a/contrib/src/gnutls/rules.mak
+++ b/contrib/src/gnutls/rules.mak
@@ -28,6 +28,7 @@ endif
 	$(APPLY) $(SRC)/gnutls/read-file-limits.h.patch
 	$(APPLY) $(SRC)/gnutls/downgrade-automake-requirement.patch
 	$(APPLY) $(SRC)/gnutls/mac-keychain-lookup.patch
+	$(APPLY) $(SRC)/gnutls/format-security.patch
 	$(call pkg_static,"lib/gnutls.pc.in")
 	$(UPDATE_AUTOCONFIG)
 	$(MOVE)