Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities
Red Hat’s Lightwell clearinghouse has patched over 400 Java open-source flaws and reached general availability.
Red Hat said its Lightwell open-source security initiative has remediated more than 400 novel vulnerabilities in foundational Java libraries since a June launch. The company announced general availability of the Lightwell Clearinghouse after a pilot, alongside parent IBM. IBM and Red Hat described a $5 billion investment and 20,000 engineers, with early financial-sector adopters including Bank of America, Citi, Goldman Sachs, JPMorgan Chase, Mastercard, Visa, and Wells Fargo. Lightwell Network delivers signed binaries, source, and SBOMs, while Clearinghouse Premier develops attested backports for specific pinned package versions that customers submit.