Tested by bru@, jsg@ and others
This addresses: CVE-2017-12180 in XFree86-VidModeExtension CVE-2017-12181 in XFree86-DGA CVE-2017-12182 in XFree86-DRI
Note that indirect GLX is now disbled by default.