Check your xorg version number.

[Pete Wright]

On 10/25/18 7:19 PM, Gladiola via freebsd-x11 wrote:
> Maintainers:
>
> https://twitter.com/hackerfantastic/status/1055555359060807680?s=19
>
> https://nvd.nist.gov/vuln/detail/CVE-2018-14685

that CVE entry seems to correspond to a PHP issue unless i'm missing 
something.

perhaps this is what you are referring to:
https://lists.x.org/archives/xorg-announce/2018-October/002927.html

yea this is really not a good thing, although i believe we are 
accidentally OK since we are not running xorg-1.19.x yet in the ports tree:

"Privilege escalation and file overwrite in X.Org X server 1.19 and later"

regardless of that line I believe others on this list are looking 
closely into this regardless.

-pete


-- 
Pete Wright
pete at nomadlogic.org
@nomadlogicLA