Hello "Debian X Strike Force" (if I've got this right...)
We've been investigating an X.Org vulnerability in Debian & Ubuntu systems that we think stems from a Debian patch to X.Org.
If someone would like to drop us a line, we'd be happy to discuss details.
Thanks,
Wez @ Google