Finding missing security backports with Roi Nisimi

Mon, 02 Nov 2026 00:00:00 +0000

Josh chat with Roi Nisimi about some research he’s done into missing backport security fixes. Roi calls these Backport Gaps. The idea is looking for security fixes on the main branch of a project but not in a released version. This is the sort of thing that was very hard in the past, but is very easy to do now. Roi has some marvelous insights into how things used to work, how they work now, and what the future could look like. It’s one of those new and complicated security problems nobody really knows how to solve.

Backports on Open Source Security

Finding missing security backports with Roi Nisimi