Vulnerability updates without interruptions
Reports and the vulnerability feed keep working while the vulnerability database is rebuilt. You no longer have to wait for an update to finish.
PatchFirst
What’s new at PatchFirst
The latest changes to the service, in a few words.
Find a project on your server with a click
Project numbers in reports, such as “projects 26, 27”, are now clickable. Click a number to see patchfirst where N, a “Copy” button and a command for root installations. Run it on that server with the same --config used to send the report. The project path still never leaves the server.
The server script is now open source
The source code for version 1.0.0 is available under the Apache-2.0 license. The script contains only our own code, and package integrity is checked during build and installation. You can see for yourself what runs on your server.
Install the script manually
The installation window now has an “Install manually, without curl | sh” section for Linux x86_64. It includes a build download link and its SHA-256 for verification, a config download from your browser, the first-run command and a ready-to-use cron line. Download the script once; cron then runs the local copy.