On Oct 25, 2018, at 9:31 PM, nicolas bats <sl1200mk2@gmail.com> wrote:

Hi,

https://lists.x.org/archives/xorg-announce/2018-October/002927.html

are we impacted by this?

No, unless you're doing something very odd.

The vulnerability only affects systems where the X server is configured so that it has root privileges even when run by a non-privileged user.  XQuartz is not normally configured that way, or with any unusual privileges.  It just runs in your normal user account with your normal privileges.

Regards,

Ken

_______________________________________________
Xquartz-dev mailing list
Xquartz-dev@lists.macosforge.org
https://lists.macosforge.org/mailman/listinfo/xquartz-dev