Strategies for Patching Critical CVEs in Open Source Software - Best Practices and Tools

Learn critical strategies for handling high-risk CVEs in open source software packages through this conference talk from Microsoft experts. Discover essential tools and approaches for rapid CVE response in container images, from using Copacetic for in-place patching to building projects from scratch. Explore common challenges in building and testing upstream projects, understand emerging industry practices, and gain insights into effectively communicating security risks across teams. Master best practices for managing your open source software supply chain, including identifying potential pitfalls and implementing proper security measures to maintain platform accreditation and business continuity.