yamt -- arbitrary command execution vulnerability

Manigandan Radhakrishnan discovered a security
vulnerability in YAMT which can lead to execution of
arbitrary commands with the privileges of the user running
YAMT when sorting based on MP3 tags. The problem exist in
the id3tag_sort() routine which does not
properly sanitize the artist tag from the MP3 file before
using it as an argument to the mv command.