The vicious circle of patch management