What is a Patch?
Patching, told as a story about nailing the builder's boards over the cracks in the wall.
The builder sends boards.For every crack found, a board to cover it. Monthly — or at once if it's urgent.
The boards arrive, and nobody nails them on.'Later', 'I'm busy', 'what if it breaks something'. The pile just grows.
Patching is nailing the board on in time.Receiving the board isn't the patch; nailing it on is. Urgent ones first, test on a small wall, then check it's really on.
Set a patch day, and the pile never grows.Nail them on together on the set day each month. Cracks thieves are already using don't wait for that day.
Some walls won't take the board.Old storehouses won't take it. Then a guard stands at that crack and the hallway is split. And a board can block a door too — so the small wall goes first.
A patch = the builder's board, nailed on in time. It counts when it's on the wall, not when it arrives.
Most incidents start at a crack that already had a board. Patch day (Patch Tuesday), urgent first (KEV), test on a small wall (staging), then verify.
When grown-ups say it
- Patch
- The board. The fix the builder (the vendor) sends to cover a crack. → the hole nobody knows about
- Patch management
- The order and the day for boards. Deciding what goes on which wall, and when.
- Vulnerability scan
- A magnifying glass on every wall. Builds the list of which cracks our castle has.
- Prioritization (CVSS · KEV)
- The urgent board. Ordered by how big the crack is (CVSS) and whether thieves already use it (KEV).
- Staging
- The small wall. Where a board goes first, to see it doesn't block a door.
- Patch Tuesday
- Patch day. The second Tuesday each month, when builders ship boards together.
- Virtual patch
- A guard at the crack. When the board won't fit or doesn't exist yet. → the note checker
- Legacy
- The old storehouse that takes no board. The builder no longer makes boards for it. → the things that can't wear a tag