It’s FOSS reports that IBM and Red Hat’s Lightwell initiative has cleared more than 400 previously unknown vulnerabilities across foundational Java libraries, backporting fixes into the pinned dependency versions enterprises actually run and contributing the patches upstream under responsible disclosure instead of waiting for maintainers to patch every supported release. Coverage is set to expand beyond Java to Python, JavaScript and .NET using the same backport-and-upstream model. Clearinghouse Premier, until now reserved for a pre-selected group of critical-infrastructure organizations, reached general availability and is open to any enterprise, sitting alongside the self-service Lightwell Network tier that launched in July, as part of IBM and Red Hat’s $5 billion commitment to open source security. Red Hat Lightwell general manager Gunnar Hellekson said AI agents shifted the threat landscape overnight by exploiting old dependencies at machine speed.
Red Hat's Lightwell Doesn't Wait for Upstream Maintainers to Act
It's FOSS reports that IBM and Red Hat's Lightwell initiative has cleared more than 400 previously unknown vulnerabilities across foundational Java libraries, backporting fixes into the pinned dependency versions enterprises actually run and contributing the patches upstream under responsible disclosure instead of waiting for maintainers to patch every supported release. Coverage is set to expand beyond Java to Python, JavaScript and .NET using the same backport-and-upstream model. Clearinghouse Premier, until now reserved for a pre-selected group of critical-infrastructure organizations, reached general availability and is open to any enterprise, sitting alongside the self-service Lightwell Network tier that launched in July, as part of IBM and Red Hat's $5 billion commitment to open source security. Red Hat Lightwell general manager Gunnar Hellekson said AI agents shifted the threat landscape overnight by exploiting old dependencies at machine speed.
Source: It's FOSS