* updated to 1.0.28
* fixes possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
* fixes possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)