Sync updates from Debian Buster Security
requested to merge wip/ritesh/sync-buster-security-updates.apertis/v2020-security into apertis/v2020-security
cairo (1.16.0-4+deb10u1) buster; urgency=medium
- CVE-2020-35492 (Closes: #CVE-2020-35492)