Broadcast message from root@prod-01 (pts/3) (Sat Nov 7 03:14:07 2026):
Please.
One day.
No CVEs.
Days since last CVE0
To everyone who writes software, and everyone who reads it for fun:
I patched on Monday. Tuesday was Patch Tuesday. Wednesday was Exploit Wednesday, because somebody read Tuesday’s diff. Thursday was the out-of-band fix for Tuesday’s fix. Today someone in a fleece vest asked if we’re affected by the one with the logo.
I’m not asking you to stop finding them. I know they’re in there. They have always been in there. I’m asking you to hold still for twenty-four hours. Nobody file anything. Nobody reserve a number. Nobody post a proof of concept with a dramatic name. I would like to drink one coffee at the temperature it was poured and close one ticket without opening two.
This is a health matter. Mine, yours, and the intern’s, who has now seen the lockfile. My doctor ran the numbers:
CVE-2026-∞ CRITICAL 9.8
- Affected
- one (1) sysadmin, all versions
- Weakness
- use-after-free in weekend
- Vector
- pager, on my nightstand
- Privileges
- root, but no authority
- Impact
- total loss of sleep, partial loss of hair
- Exploited
- in the wild, on weekends
- Fixed in
- retirement
- Workaround
- a nap (unsupported)
One day. That’s the whole change request. Scope: everything. Risk: none. Rollback plan: resume the horrors at midnight.