File _patchinfo of Package patchinfo.35868

<patchinfo incident="35868">
  <issue tracker="cve" id="2024-47176"/>
  <issue tracker="cve" id="2024-47850"/>
  <issue tracker="bnc" id="1230939">VUL-0: CVE-2024-47176: cups-filters: VU#398154.2: cups-browsed binds to INADDR_ANY:631</issue>
  <issue tracker="bnc" id="1231294">VUL-0: CVE-2024-47850: cups-filters: cups-browsed can be abused to initiate remote DDoS against third-party targets</issue>
  <packager>msmeissn</packager>
  <rating>critical</rating>
  <category>security</category>
  <summary>Security update for cups-filters</summary>
  <description>This update for cups-filters fixes the following issues:

- CVE-2024-47176: cups-browsed binds on UDP port 631 and trusts packets that try to trigger a Get-Printer-Attributes
  IPP request. (bsc#1230939)
- CVE-2024-47850: cups-browsed can be abused to initiate remote DDoS against third-party targets (bsc#1231294)


The fix is disabling the CUPS protocol in cups-browsed.
</description>
</patchinfo>