Red Hat Blog: A patch only reduces risk when it runs in production

Instead of every enterprise independently researching, rebuilding, and testing the same fix for the same library, Red Hat and IBM do that labor once at the source. We deliver a version-specific, remediated component into the pipeline. In critical cases, we make sure the fix exists in the first place.