multimedia/ffmpeg: backport some security fixes
Obtained from: upstream (FFmpeg 3.4.3) Approved by: ports-secteam blanket