Add CVE-2018-7263/libmad

This CVE assignment is highly confusing, because even the master
references from the MITRE database reference to a SUSE bug which claims
that this is a an issue in mpg123 and it is a duplicate of the
previously assigned CVE.

Pending request to MITRE for clarification.