CVE-2014-1934

CVE-2014-1934 affects tag.py in eyeD3 (python-eyed3) up to versions 7.0.3, 0.6.18 and earlier, where a symlink attack on a temporary file allows local users to modify arbitrary files. Publicly documented fixes exist in eyeD3 updates (e.g., Fedora/OpenSUSE/OSS advisories note patching in later rel...