Hi, as xorg-server 1.4 isn't ready to migrate, and won't be for some more time, I prepared an updated package for testing-security. It fixes CVE-2007-5760, CVE-2007-5958, CVE-2007-6427, CVE-2007-6428, CVE-2007-6429 and CVE-2008-0006, and will be on its way to klecker in a few minutes. I'm travelling right now, so in case something comes up please contact debian-x@lists.debian.org. Thanks, Julien