Gentoo Linux Security Advisory GLSA 200703-11 – The Magnatune downloader doesn’t quote the m_currentAlbumFileName parameter while calling the unzip shell command. Versions less than 1.4.5-r1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/55076/glsa-200703-11.txt
Source: https://packetstormsecurity.com/files/55076/Gentoo-Linux-Security-Advisory-200703-11.html