Security

Silent Patch

A software release that fixes a security vulnerability without disclosing it at the time, typically described in release notes as generic security or stability fixes. The gap between the fix shipping and the advisory being published is the silent-fix window.

Deep dive

Learn Article

Why a Vendor's 'Optional' Update Label Tells You Nothing About Security

Release importance ratings answer a product question, not a security one. How the silent-fix window works, which releases deserve suspicion, and how to patch without trusting the label.

intermediate 6 min read

Back to glossary