Mark CVE-2019-13626 as not affecting libsdl1.2

Support for 24-bit PCM WAVE has been introduced in SDL 2.0.
Additionally the unchecked encoded variable end in IMA_ADPCM_decode() is
already covered by CVE-2019-7574.