contrib/expat - Apply two vendor fixes for CVE-2009-3720.