Greg Brockman：压缩库漏洞披露与修补协调
中文全文 · AI 翻译
我们发现了一个广泛部署的压缩库中的远程代码执行漏洞，并一直在推进披露工作。
这既是一个影响重大的问题，也说明了协调修补可能有多复杂，因为这个库被集成进了许多下游软件：
对照原文
we've found and have been working on disclosure for a remote code execution in a widely-deployed compression library. it's both an impactful issue and an example that shows how complicated it can be to coordinate patching, since it's integrated into a lot of downstream software: