A new Debian Linux update has been published: ELA-335-1 flac security update
A flac security update has been released for Debian GNU/Linux 8 Extended LTS to address a possible out-of-bounds read due to a heap buffer overflow.Read more @ Linux Compatible