gedit security update

CentOS Errata and Security Advisory CESA-2005:499

gEdit is a small text editor designed specifically for the GNOME GUI desktop.

A file name format string vulnerability has been discovered in gEdit. It is
possible for an attacker to create a file with a carefully crafted name
which, when the file is opened, executes arbitrary instructions on a
victim’s machine. Although it is unlikely that a user would manually open a
file with such a carefully crafted file name, a user could, for example, be
tricked into opening such a file from within an email client. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-1686 to this issue.

Users of gEdit should upgrade to this updated package, which contains a
backported patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2005-June/073981.html
https://lists.centos.org/pipermail/centos-announce/2005-June/073982.html
https://lists.centos.org/pipermail/centos-announce/2005-June/073991.html
https://lists.centos.org/pipermail/centos-announce/2005-June/073992.html
https://lists.centos.org/pipermail/centos-announce/2005-June/073999.html
https://lists.centos.org/pipermail/centos-announce/2005-June/074005.html
https://lists.centos.org/pipermail/centos-announce/2005-June/074010.html

Affected packages:
gedit
gedit-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2005:499