CVE ID:	CVE-2024-0409
Description:	A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.
Test IDs:	1.3.6.1.4.1.25623.1.0.885579   1.3.6.1.4.1.25623.1.0.885591
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2024-0409 RHBZ#2257690 https://bugzilla.redhat.com/show_bug.cgi?id=2257690 RHSA-2024:0320 https://access.redhat.com/errata/RHSA-2024:0320 RHSA-2024:2169 https://access.redhat.com/errata/RHSA-2024:2169 RHSA-2024:2170 https://access.redhat.com/errata/RHSA-2024:2170 RHSA-2024:2995 https://access.redhat.com/errata/RHSA-2024:2995 RHSA-2024:2996 https://access.redhat.com/errata/RHSA-2024:2996 https://access.redhat.com/security/cve/CVE-2024-0409 https://access.redhat.com/security/cve/CVE-2024-0409 https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/ https://security.gentoo.org/glsa/202401-30 https://security.gentoo.org/glsa/202401-30 https://security.netapp.com/advisory/ntap-20240307-0006/ https://security.netapp.com/advisory/ntap-20240307-0006/