IBM and Red Hat address over 400 Java vulnerabilities via Lightwell

VERA Brief

AI-generated. Grounded in the article and its cited sources.

IBM and Red Hat's Lightwell program has identified and resolved over 400 previously unknown vulnerabilities in common Java libraries. The Lightwell Clearinghouse is now available for enterprise customers to submit open-source dependencies for review and remediation, aiming to improve software supply chain security.

Key facts

• IBM and Red Hat's Lightwell initiative has identified and patched more than 400 undisclosed vulnerabilities in Java libraries.
• The Lightwell Clearinghouse is now generally available as a service for enterprise customers.
• Enterprise clients can use the Clearinghouse to submit open-source dependencies for vulnerability assessment and remediation.
• This effort addresses challenges in securing software supply chains that rely on open-source components.
• Verifying and addressing vulnerabilities in foundational software components is important for digital system trust.