OpenSSF Adds 4 Members, Releases CRA Guides as Ericsson Fixes 1,400 Bugs
Image
Prague – – October 06, 2026 -- The Open Source Security Foundation (OpenSSF) added four new General Members and published a wave of Cyber Resilience Act (CRA) compliance resources, including a case study showing Ericsson Software Technology contributed more than 1,400 upstream dependency fixes to meet the regulation's requirements.
Ericsson eliminates private forks with 1,400 upstream contributions
Ericsson Software Technology removed internal code forks and submitted over 1,400 dependency updates and security fixes directly upstream, using OpenSSF guidance to satisfy CRA obligations. OpenSSF cited the case as enterprise-scale proof that fixing vulnerabilities upstream, rather than in isolated forks, strengthens the broader software supply chain.