web/olddownload: add FFmpeg 1.0.9

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
web/security: fill in 1.0 branch CVE backports

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>