Hi, I wanted to let you guys know that I uploaded a new build of XQuartz-2.7.0_beta3. This version pulls in fixes for recent security advisories for freetype, libpng, and xorg-server. Note that I just realized that Xephyr, Xvfb, Xnest, and Xfake are still vulnerable because I just patched X11.app, not the other servers. My apologies for that, it will be addressed in the next version in which I hope to bring those servers up to the latest release. A possible hang at launch in earlier 2.7.0 betas has been fixed in this build. Updates have been made to xinit which should allow easier development of the Xorg DDX alongside XQuartz. Fontconfig now enables autohinting by default for improved font rendering. The package seems to not have the launchd.plist permissions issues discovered in beta2 even though there was nothing changed in the build script to handle it. I really have no idea how those permissions went crazy in the previous build, but it seems to be fine now. This was built and tested on Lion and is expected to run on SL as well. http://static.macosforge.org/xquartz/downloads/SL/XQuartz-2.7.0_beta3.dmg Thanks, Jeremy