Olivier Fourdan discovered that missing input validation in the Xserver’s
handling of XkbSetGeometry requests may result in an information leak
or denial of service.