Good point. Reality is more fine-grained than the account of my own perception. Do you know if contrib packages are also getting security updates ? If no then

Good point. Reality is more fine-grained than the account of my own perception. Do you know if contrib packages are also getting security updates ? If no then why didn't they just move the ffmpeg package there. To me it felt like the really wanted the ffmpeg package to be virtual and pointing to libav.