Security Flaw in xorg-client?

[Michael Edenfield]

My nightly security scan has been complaining lately about this:

Affected package: xorg-clients-6.7.0                                                                                 
Type of problem: XFree86 opens a chooserFd TCP socket even when
DisplayManager.requestPort is 0.                     

1) Am I correct that this issue is related to xdm, so if I'm running a
replacement and/or not running a display manager this isn't an issue?

2) Is this bug really shared by XF86 and Xorg, and the description needs
updating, or is it just picking up xdm and assuming it's a broken XF86
version, or what?

Thanks for your time,

--Mike

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20040705/1a054a79/attachment.bin