Lightwell Fixes 400 Unknown Java Vulnerabilities, Opens Priority Patch Clearinghouse

IBM and Red Hat said Lightwell, their $5 billion open-source security program launched in May, has found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries. The companies also made Lightwell Clearinghouse generally available, letting enterprises request priority review and a backported fix for a specific open-source dependency running in production.

• Lightwell found and fixed 400+ unknown Java library vulnerabilities
• IBM and Red Hat fund the program with $5 billion since May
• Lightwell Clearinghouse is now generally available for priority patches
• Fixes are backported to the older dependency versions in production