composer update james-heinrich/getid3 - fix bug & improved XXE fix

same as #121 for stable7

Fixes an error that raises a PHP fatal.

To test this: just check if the previews of music files still work.

cc @wakeup @fossxplorer @jbtbnl @georgehrke

@LukasReschke Security fix included (see changelog)
@karlitschek This is essential at it could crash preview generation for some flac files - therefore I opened this as a backport. I of course tested this and it works as expected.