{"id":166958,"date":"2026-11-06T10:00:00","date_gmt":"2026-11-06T09:00:00","guid":{"rendered":"https:\/\/e3mag.com\/?p=166958"},"modified":"2026-09-30T10:30:18","modified_gmt":"2026-09-30T08:30:18","slug":"speed-issue-classic-patching","status":"publish","type":"post","link":"https:\/\/e3mag.com\/en\/geschwindigkeitsproblem-klassisches-patching\/","title":{"rendered":"Speed Issues with Traditional Patching"},"content":{"rendered":"

Open source has become an integral part of the business world; after all, 98 percent of commercial codebases now contain open-source software. Ultimately, hardly any modern application can do without open source\u2014after all, why should companies develop everything from scratch themselves when there are reliable solutions that are actively maintained by a vibrant community? SAP, too, can be easily extended with the help of open source\u2014the foundation for this is provided by SAP BTP, in which SAP itself also relies on open source in many areas.<\/p>\n\n\n\n

However, what has so far dramatically increased the pace of innovation in companies is now turning into a massive security challenge, as advanced AI models are incredibly good at finding vulnerabilities in software. For example, using the preview version of Claude Mythos, Anthropic examined more than 1,000 open-source projects this spring\u2014projects on which a large part of the internet and many corporate infrastructures are based. Thousands of vulnerabilities were discovered, which security experts subsequently rated as \u201ehigh\u201c or \u201ecritical.\u201c.<\/p>\n\n\n\n

<\/p>\n\n\n\n

The Race Between Humans and AI<\/h2>\n\n\n\n

This marks the start of a race for companies\u2014one they can hardly win on their own. After all, if AI finds more vulnerabilities than humans ever could\u2014and does so in ever-shorter periods of time\u2014their established patching and update processes will break down. They simply can no longer keep up with evaluating which applications contain vulnerable components and which systems are affected, and they lack the time to thoroughly test all available patches and new versions, customize them as needed, and deploy them. The mountain of updates keeps growing\u2014as does the risk that cybercriminals will exploit one of the unpatched vulnerabilities.<\/p>\n\n\n\n

AI can also help by analyzing code and vulnerability information and suggesting appropriate countermeasures to reduce response times. This is exactly where IBM and Red Hat come in with Lightwell\u2014an initiative to secure complex open-source software supply chains, based on an AI-powered remediation engine and the expertise of more than 20,000 engineers. As part of Lightwell, vulnerabilities and dependencies are identified, security updates are developed, and production-ready update packages are deployed. Disruptive upgrades or extensive changes to production systems are not necessary, as the fixes and patches developed are always backported to earlier versions in accordance with the \u201eUpstream Always\u201c model, allowing companies to continue using their existing software versions without having to switch to new major releases.<\/p>\n\n\n\n

At launch, Lightwell maintains a catalog of over 6,500 digitally signed and certified components, which is constantly being expanded and includes not only source code but also compliance documents such as SBOMs. Initially available only for the financial sector, targeted individual updates for other components are also being developed\u2014with other industries such as healthcare, telecommunications, and public administration set to follow. Ultimately, AI not only exacerbates the threat landscape but also helps reduce the attack surface. What previously required hundreds or thousands of manual checks, adjustments, and decisions can now be largely automated. To ensure nothing goes wrong, the processes must be carefully designed. And thanks to Lightwell, companies don\u2019t have to do this on their own; instead, they can seek support from SAP partners and ISVs that join Lightwell to review applications\u2014whether developed in-house or by integrators\u2014against open-source components, identify vulnerabilities, and patch them.<\/p>\n\n\n\n

Security, just like open source, is and always will be a team effort, and the best results are achieved when everyone involved works together.<\/p>\n\n\n\n

<\/div>\n\n\n\n

To the partner entry:<\/p>\n\n\n\n

\"\"<\/a><\/figure>","protected":false},"excerpt":{"rendered":"

AI makes it possible to detect vulnerabilities in open-source software more quickly. This poses a challenge for companies, as they are struggling to keep up with identifying and patching dependencies and affected components.<\/p>","protected":false},"author":5841,"featured_media":147188,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"pmpro_default_level":"","footnotes":""},"categories":[22,7,5,45071],"tags":[145,174,20346,258,626,506,514,40995,44682,45265,1516,45264],"coauthors":[44481],"class_list":["post-166958","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-open-source","category-meinung","category-it-management","category-mag-26-10","tag-automatisierung","tag-compliance","tag-cybersecurity","tag-ibm","tag-kuenstliche-intelligenz","tag-open-source","tag-red-hat","tag-sap-btp","tag-sap-security","tag-schwachstellen","tag-security","tag-software-supply-chain","pmpro-has-access"],"acf":[],"featured_image_urls_v2":{"full":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450.jpg",1000,450,false],"thumbnail":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-150x150.jpg",150,150,true],"medium":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-400x180.jpg",400,180,true],"medium_large":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-768x346.jpg",768,346,true],"large":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450.jpg",1000,450,false],"image-100":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-100x45.jpg",100,45,true],"image-480":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-480x216.jpg",480,216,true],"image-640":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-640x288.jpg",640,288,true],"image-720":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-720x324.jpg",720,324,true],"image-960":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-960x432.jpg",960,432,true],"image-1168":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450.jpg",1000,450,false],"image-1440":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450.jpg",1000,450,false],"image-1920":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450.jpg",1000,450,false],"1536x1536":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450.jpg",1000,450,false],"2048x2048":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450.jpg",1000,450,false],"trp-custom-language-flag":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-18x8.jpg",18,8,true],"bricks_large_16x9":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450.jpg",1000,450,false],"bricks_large":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450.jpg",1000,450,false],"bricks_large_square":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450.jpg",1000,450,false],"bricks_medium":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-600x270.jpg",600,270,true],"bricks_medium_square":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-600x450.jpg",600,450,true],"profile_24":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-24x24.jpg",24,24,true],"profile_48":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-48x48.jpg",48,48,true],"profile_96":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-96x96.jpg",96,96,true],"profile_150":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-150x150.jpg",150,150,true],"profile_300":["https:\/\/e3mag.com\/wp-content\/uploads\/2024\/11\/open_source_kol_red_hat_1000x450-300x300.jpg",300,300,true]},"post_excerpt_stackable_v2":"

Mit KI lassen sich Schwachstellen in quelloffener Software schneller aufsp\u00fcren. F\u00fcr Unternehmen wird das zu einer Herausforderung, da sie kaum noch nachkommen, Abh\u00e4ngigkeiten und betroffene Komponenten zu identifizieren und abzudichten.<\/p>\n","category_list_v2":"Open Source Kolumne<\/a>, Die Meinung der SAP-Community<\/a>, IT-Management<\/a>, MAG 26-10<\/a>","author_info_v2":{"name":"Matthias Czwikla, Red Hat","url":"https:\/\/e3mag.com\/en\/author\/matthias-czwikla\/"},"comments_num_v2":"0 comments","_links":{"self":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/166958","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/users\/5841"}],"replies":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/comments?post=166958"}],"version-history":[{"count":2,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/166958\/revisions"}],"predecessor-version":[{"id":166962,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/166958\/revisions\/166962"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/media\/147188"}],"wp:attachment":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/media?parent=166958"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/categories?post=166958"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/tags?post=166958"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/coauthors?post=166958"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}