IBM and Red Hat Fix Over 400 Unknown Open Source Bugs
IBM and Red Hat say Lightwell found and remediated more than 400 previously unknown Java library vulnerabilities and launched Lightwell Clearinghouse.
What you need to know
IBM and Red Hat announced that Lightwell identified and remediated more than 400 previously unknown vulnerabilities in widely used Java libraries. The companies also made Lightwell Clearinghouse generally available, letting enterprise customers submit open source dependencies for priority review and remediation.
- Lightwell found and fixed over 400 previously unknown bugs in production Java libraries.
- Fixes were backported to older software versions still in use.
- Lightwell Clearinghouse is now generally available for priority review requests.
Remediation focus
IBM and Red Hat said Lightwell uncovered and remediated more than 400 previously unknown vulnerabilities in widely used, production-grade Java libraries. The companies stated that fixes were backported to versions already running in production, aiming to reduce risk without requiring customers to replace existing scanners, repositories, pipelines or testing processes.
The announcement cited autonomous AI agents as a growing risk that could combine several lower-risk weaknesses into a more serious attack. According to the companies, detection alone does not remove risk; fixes must work with software versions in use and be deployable without disrupting operations.
Clearinghouse access
Lightwell Clearinghouse is now generally available, allowing enterprise customers to submit specific open source software dependencies for priority review and remediation. The companies said remediations are delivered through secured repositories that connect with customers’ existing IT processes.
Lightwell combines open source engineering from Red Hat and IBM, community relationships, AI-assisted engineering workflows and Red Hat’s secure supply chain and build infrastructure. Applicable fixes are contributed back to upstream open source projects under responsible disclosure protocols, with embargo protections for Clearinghouse participants.
What does Lightwell Clearinghouse let customers do?
It lets enterprise customers submit specific open source software dependencies for priority review, remediation and fixes that can be applied to older software versions still in use, according to IBM and Red Hat.
Sources & context
- IBM and Red Hat Remediate More Than 400 Previously Unknown Open Source Vulnerabilities ↗newsroom.ibm.com
Something needs correcting? Send a correction.