vulnerability patching best practices.