By Emma Woollacott
Publication Date: 2026-10-08 04:00:00
IBM and Red Hat have fixed more than 400 previously unknown vulnerabilities in widely used Java libraries through their Lightwell Clearinghouse initiative.
Announced earlier this year with a $5 billion investment and more than 20,000 engineers, Lightwell Clearinghouse lets enterprise customers submit open source software dependencies for priority review and fixes.
“For over two decades, Red Hat has backported security patches across thousands of packages,” said Matt Hicks, president and CEO of Red Hat.
“Lightwell scales this exact model across a wider scope of open source ecosystems. We are applying the same discipline, upstream commitment, and engineering rigor across all active application layers.”
Since the initial Lightwell launch, the duo said they have uncovered, remediated, and backported fixes for hundreds of previously unknown bugs in widely deployed, production-grade software.
“Finding and neutralizing 400-plus novel vulnerabilities so quickly shows how fast Lightwell can…
