Engineering for the Long Haul: Operating Open Source at Scale
summary
Research shows a 107% increase in open source vulnerabilities in commercial codebases and 48% of orgs report incidents with 93% knowing about the exposure before it occurs, often blocked by downtime or dependency complexity. The vendor offers KernelCare and LibCare for rebootless patching that inject kernel fixes in memory, backports patches with SLAs (critical within 14 days), and maintains an SBOM and a public tracker at cv.tuxcare.com with 5,000+ CVEs patched and 2,300 customers.
AI-written summary · about
chapters (10)
- 0:00Introduction and welcome
- 1:28Open source security challenges
- 8:58TuxCare’s solutions overview
- 10:48Rebootless Linux patching
- 13:40Endless lifecycle support
- 17:13Dependency tree patching
- 19:40Supply chain transparency
- 21:26CV tracker demo
- 23:55Why choose TuxCare
- 25:43Q&A and closing
related talks
17mSustaining Yesterday’s Linux: Delivering Security for Today’s Workloads
47mThe Open Source Paradox: Unpacking Risk, Equity, and Acceptance
58mThe Open Source Paradox: Unpacking Risk, Equity, and Acceptance
37mOpen Source Doesn't Care About You, But You Should Care About It
21mCommunities, Enterprises and All the Rest
52mCollaborating to Improve Open Source Security: How the Ecosystem Is Stepping Up
39mFrom Discovery to Fix: What 10,000 Open Source Projects Reveal About CVE Remediation
38mBetter, Faster, Stronger: How the Global Acceleration of OS Development Is Changing