patch
in English: patch / hotfix
A patch is a small modification issued after a software release that fixes a bug or security vulnerability without requiring the entire program to be reissued or reinstalled.
In plain terms
Imagine that your bicycle inner tube has a hole. You do not buy a new bicycle but stick a patch over the hole and continue. A software patch is the same: most of the program remains untouched, only the faulty part is fixed. The English word also literally means a patch.
The patch is useful for quickly fixing bugs in programs already in use. Most often, it plugs a security vulnerability, eliminates a functional error, or remedies a minor inconvenience. All you see from this is that your phone or computer requests an update.
A hotfix is an urgent version of a patch: a fix that cannot wait for the next scheduled update because the bug is causing damage right now. It is like a plumber not coming at next week's appointment, but immediately, because water is flooding.
In the AI world, you also encounter the word: coding agents typically do not rewrite the entire program, but create patches, meaning they show exactly which lines need to be replaced. This allows a person to easily review what the agent changed.
How it works
- Someone notices a bug or security vulnerability: a user, a tester, a security researcher, or increasingly an AI agent.
- The developer (or coding agent) locates the faulty code section and writes the fix. At the source code level, a patch is essentially a diff list: delete these lines, write these in their place.
- The fix is reviewed and tested to ensure it actually resolves the issue and does not break something else. With a hotfix, this phase is shorter due to time pressure.
- The completed patch is released and reaches your device as an update, where the program replaces old parts with new ones.
- The program's version number usually increases slightly, for example from 2.4.1 to 2.4.2, so it is possible to track who already has the fix installed.
An everyday example
In the evening, your phone notifies you that a security update is available and requests a restart. This is a patch: the manufacturer found a vulnerability in the system and sent the fix. If your banking app fails to let you log in after a faulty update, and a fix arrives by the next morning, that was a hotfix.
Who is affected
A common misconception
Limits and risks
- A patch only protects if you install it: a released but unapplied fix is worthless.
- A fix can itself introduce new bugs, especially a hastily released hotfix that was tested for less time.
- No more patches are made for old, unsupported programs and devices, which become increasingly vulnerable over time.
- A patch written by an AI agent must still be reviewed by a human, as the fix may look convincing yet be flawed or incomplete.
Similar, but not the same
- version upgrade – A version update brings new features and major changes. A patch primarily fixes existing bugs, with at most minor modifications.
- workaround – A workaround only bypasses the bug until a fix exists, whereas a patch eliminates the bug itself.
- rollback – In a rollback, you return to an earlier working version of the program, whereas a patch fixes things going forward.
Related concepts
software update, software maintenance, version control
hotfix, security patch, fixing a zero-day vulnerability
programhiba (bug), vulnerability, diff, coding agent, code review
A brief history
The word originates from the era of punched tapes and punched cards. Repairs were made by cutting out the faulty tape section and gluing a repaired piece in its place, or by covering the holes with adhesive. Larry Wall released the program named 'patch' in 1985, which enabled the automatic insertion of repairs.
Where things stand
The patch is a decades-old, everyday tool in software development, and most devices install it automatically today. By the end of 2026, the novelty is that an increasing number of fixes are prepared by coding agents and approved by humans.
In the news
- AI coding agents are installing MCP servers that will never be patchedNov 3, 2026 · Code
- AI political ad spending in US midterms tops $137 million as regulation lagsOct 26, 2026 · Marketing
- Government websites go offline after critical AI-discovered PHP flawsOct 26, 2026 · Code
- Deepfake rules in the US: Maryland's fraud law and election advertisingOct 26, 2026 · Jog
- Linux kernel may drop AI-code labels as Torvalds uses AI tooOct 19, 2026 · Code
- US states enacted 144 AI laws across 40 states in 2025Oct 14, 2026 · Jog
- Coding benchmarks mismeasure ability, and even the best models fail, critics sayOct 12, 2026 · Code
- 31 US states have laws against election deepfakes, but the patchwork works poorlyOct 12, 2026 · Jog
Also known as
patch · hotfix · patch · folt · patch · security update · security patch · bugfix
Sources
This entry was machine-edited and has undergone machine expert review; the “In the news” section updates automatically from Agent Age stories.