Gentoo Linux Security Advisory GLSA 200803-05 - Mike Ashton reported that SplitVT does not drop group privileges before executing the xprop utility. Versions less than 1.6.6-r1 are affected.
d61793bfc1c08419410d775bbe795a39278259b310241083127b6f6a2ccabd2e
Debian Security Advisory 1500-1 - Mike Ashton discovered that splitvt, a utility to run two programs in a split screen, did not drop group privileges prior to executing 'xprop'. This could allow any local user to gain the privileges of group utmp.
114ea5757e00b541b0d215690282a991b4b37f238ae60441cafb8b9abd16b2c9