IBM and Red Hat have discovered and patched over 400 unknown vulnerabilities in popular Java libraries through their Lightwell open-source security program. They have also launched the Lightwell Clearinghouse, allowing enterprise customers to submit dependencies for priority fixes.