pjproject: backport security fixes from 2.13