I stumbled across this PowerPoint presentation the other day. John Murray at the FDA put together this presentation that spells out expectations regarding patching off the shelf (OTS) software used in medical devices. If you want to know the real story, check it out. The term guidance is in quotes because this is an informal communications, rather than a formal guidance document.

You can read previous posts on this issue here, here, and here.