⬇ Download holy card: ·
Blessed Shittrix, of Unliturgical Name
Patron of hypervisors, management APIs that aged badly, and names you can't say in church.
Life
On 24 April 2026 independent researcher Jakob Wolffhechel published Shittrix, the result of a nine-week review of XAPI, the management software behind Citrix XenServer and XCP-ng. By his account, 89 input-validation problems, some dating back to around 2006, let a low-privilege delegated role reach control of the host and the whole pool. Disclosure came without an embargo, citing earlier disputes with the vendors, and at the time there were no public patches.
Prayer
O Blessed Shittrix, whose name makes altar boys blush, let our APIs check every parameter and let vendors answer soon. Amen.
How to celebrate
Celebrated by following Citrix and Vates advisories, isolating the hypervisor management network, and handing out delegated roles sparingly.
Ugly name, long job.