No mention of whether or not the code had these vulnerabilities before the X.Org maintainers threw a fit and removed two years worth of contributions after the XLibre team forked X11.