Tag

#patching

Tagged “patching”

3 articles

MinIO is archived. Docker wants to rent you the patches.

Docker is pitching Extended Lifecycle Support as the answer to MinIO reaching end of life, promising patched images and audit evidence for up to five years past upstream archival. For CI/CD owners carrying an EOL dependency, that reframes a migration deadline as billable time.

Sep 7, 2026 · Tomás Vega Supply-chain security

Aikido buys Root to patch open source in place, without the upgrade dance

Aikido Security acquired Root, a company whose technology fixes known vulnerabilities directly inside the package version you already run. The trade-off: someone other than upstream now decides what your dependency looks like on disk.

Jul 1, 2026 · Tomás Vega Security & supply chain

SP Page Builder ships a one-file controller patch in 6.6.2, and the locked support thread is a reminder that patching isn't cleanup

JoomShaper has published the verbatim fix for a vulnerable controller endpoint in its SP Page Builder Joomla extension as a public GitHub gist, after issuing the same fix bundled in v6.6.2. The thread that hosts the patch is locked, and the comments under it are the real story: agencies reporting client sites already compromised, with the update closing the door behind attackers who walked in last week.

Jun 26, 2026 · Tomás Vega