CVE:CVE-2014-1934
CNNVD:CNNVD-201405-190
eyeD3（也称python-eyed3）是一个Python程序和模块，它提供了读写ID3标签的功能，同时可检测MP3文件的头信息，包括比特率、采样频率和播放时间等。
Python eyeD3 0.7.3版本和0.6.18及之前版本的tag.py文件中存在安全漏洞。本地攻击者可通过对临时文件实施符号链接攻击利用该漏洞修改天任意文件。
solution:Upgrade travis_shirk eyed3 to a higher version than 0.6.18,0.1.0,0.2.0,0.3.0,0.3.1,0.4.0,0.5.0,0.5.1,0.6.0,0.6.0:rc1,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.8,0.6.9,0.6.10,0.6.11,0.6.12,0.6.13,0.6.14,0.6.15,0.6.16,0.6.17,0.7.3,and avoid the version (,0.6.18],0.1.0,0.2.0,0.3.0,0.3.1,0.4.0,0.5.0,0.5.1,0.6.0,0.6.0:rc1,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.8,0.6.9,0.6.10,0.6.11,0.6.12,0.6.13,0.6.14,0.6.15,0.6.16,0.6.17,0.7.3; Upgrade opensuse opensuse to a higher version than 12.3,13.1,and avoid the version 12.3,13.1