CLSA-2026-1787645764 Fix CVE(s): CVE-2020-35492

SECURITY UPDATE: stack-based buffer overflow in the image compositor - debian/patches/CVE-2020-35492.patch: in inplacesrcspans in src/cairo-image-compositor.c, take the mask write pointer from pixmanimagegetdatar-mask instead of the r-buf tail of the stack-allocated span renderer, so a row wider...