main/ffmpeg: security upgrade to 1.2.8 (CVE-2014-5271,CVE-2014-5272)

fixes #3316