gnu: cairo: Fix CVE-2018-19876 and CVE-2020-35492.