Linux

67966 readers

406 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago

MODERATORS

nooter692@lemmy.ml

MarcellusDrum@lemmy.ml

cypherpunks@lemmy.ml

cyclohexane@lemmy.ml

IBM & Red Hat Find More Than 400 New Vulnerabilities In Popular Java Code (www.phoronix.com)

submitted 1 hour ago by SocialistVibes01@lemmy.ml to c/linux@lemmy.ml

2 comments fedilink hide all child comments

IBM and Red Hat announced today they have identified and remediated more than 400 previously unknown vulnerabilities across popular Java libraries.

Red Hat's Lightwell open-source software supply chain initiative that relies on specialized AI agents was able to accelerate the discovery of 400+ vulnerabilities affecting popular Java code. They announced this feat today as part of their promoting Lightwell Clearinghouse to GA, which is an enterprise service for their customers to submit open-source software dependencies for priority review and remediation.

From today's announcement:

"The milestone addresses a growing business risk. As autonomous AI agents become capable of combining several lower-risk software weaknesses into a more serious attack, companies need to do more than identify vulnerabilities. They need a practical way to develop, test and deploy fixes in the software that supports critical applications."

Details are light on all the specific vulnerabilities uncovered. They appear to be ramping up fast in their Lightwell efforts as in the embargoed press release days ago was at 300+ vulnerabilities and then increased to 400+ vulnerabilities. Their AI laden press release announcing these 400+ vulnerabilities can be found on the IBM Newsroom.

top 2 comments

sorted by: hot top controversial new old

[–] pglpm@lemmy.ca 4 points 1 hour ago

I wonder how many new vulnerabilities the fixes (likely LLM-generated) to these vulnerabilities will introduce.

[–] SocialistVibes01@lemmy.ml 9 points 1 hour ago* (last edited 1 hour ago)

I wish the PR was clearer about what kind of bugs were discovered and whether they're could ever be triggered.