Debian Security Advisory 1585-1 – It was discovered that speex, The Speex codec command line tools, did not correctly did not correctly deal with negative offsets in a particular header field. This could allow a malicious file to execute arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/66597/dsa-1585-1.txt
Source: https://packetstormsecurity.com/files/66597/Debian-Linux-Security-Advisory-1585-1.html