Thanks for tracking this down! Since xserver-xgl is in "universe", and a non-default, I think it gets less attention. However, people are reading the bugs. :)
** Changed in: xserver-xgl (Ubuntu)
Status: Confirmed => Fix Released
--
xserver or gdm sets xhost + ; no security
https://launchpad.net/bugs/73110
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
