A package called "ffmpeg" has been in debian forever now, and running it's binary claims that "ffmpeg is deprecated", which is a complete lie.
EDIT: also see "FFmpeg and a thousand fixes" [1], suggesting that FFmpeg is working hard improving the security situation, while libav mainly ignored the effort.
PPS also i dont like the libav crew
1: http://googleonlinesecurity.blogspot.se/2014/01/ffmpeg-and-t...