Backport CVE fixes to dns/unbound and x11-servers/xorg-server