<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: canna</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-21950: A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openS</title><link>https://patchthecve.com/cve/CVE-2022-21950.html</link><guid>https://patchthecve.com/cve/CVE-2022-21950.html</guid><pubDate>Wed, 17 Jun 2026 04:27:20 +0000</pubDate><description>MEDIUM 5.3: A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backp</description></item><item><title>CVE-2002-1159: Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of </title><link>https://patchthecve.com/cve/CVE-2002-1159.html</link><guid>https://patchthecve.com/cve/CVE-2002-1159.html</guid><pubDate>Tue, 16 Jun 2026 21:58:51 +0000</pubDate><description>MEDIUM 6.4: Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.</description></item><item><title>CVE-2002-1158: Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrar</title><link>https://patchthecve.com/cve/CVE-2002-1158.html</link><guid>https://patchthecve.com/cve/CVE-2002-1158.html</guid><pubDate>Tue, 16 Jun 2026 21:58:51 +0000</pubDate><description>HIGH 7.2: Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.</description></item></channel></rss>