Gentoo Linux Security Advisory GLSA 200806-05 – Mamoru Tasaka discovered that filenames of the image archives are not properly sanitized before being passed to decompression utilities like unrar and unzip, which use the system() libc library call. Versions less than 0.9.17 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/67367/glsa-200806-05.txt
Source: https://packetstormsecurity.com/files/67367/Gentoo-Linux-Security-Advisory-200806-5.html