Backport v2022 <- v2023dev1: Update from debian/bullseye-security

Backport !22 (merged) to v2022

Fixes: https://phabricator.apertis.org/T8519

debian/changelog

+xorg-server (2:1.20.11-1+deb11u1+apertis1) apertis; urgency=medium
+
+  * Sync updates from Debian Bullseye Security. Remaining Apertis specific changes:
+    + Add patch disable-libgl-in-xwayland.patch to disable glamor and
+      glxvnd in xwayland to avoid Xwayland depending on big GL.
+
+ -- Apertis CI <devel@lists.apertis.org>  Thu, 23 Dec 2021 13:08:43 +0000
+
+xorg-server (2:1.20.11-1+deb11u1) bullseye-security; urgency=high
+
+  * Team upload.
+  * record: Fix out of bounds access in SwapCreateRegister() [CVE-2021-4011]
+  * xfixes: Fix out of bounds access in *ProcXFixesCreatePointerBarrier() [CVE-2021-4009]
+  * Xext: Fix out of bounds access in SProcScreenSaverSuspend() [CVE-2021-4010]
+  * render: Fix out of bounds access in SProcRenderCompositeGlyphs() [CVE-2021-4008]
+
+ -- Julien Cristau <jcristau@debian.org>  Thu, 16 Dec 2021 18:08:23 +0100
+
 xorg-server (2:1.20.11-1+apertis1) apertis; urgency=medium
 
   * Sync updates from Debian Bullseye. Remaining Apertis specific changes: