Hello "Debian X Strike Force" (if I've got this right...) We've been investigating an X.Org vulnerability in Debian & Ubuntu systems that we think stems from a Debian patch to X.Org.
If someone would like to drop us a line, we'd be happy to discuss details. Thanks, Wez @ Google