Google employees took initiative to help thousands of Open Source Projects patch critical remote code execution vulnerability in a widely used Apache Commons Collections (ACC) library. The initiative was volunteered by some 50 Google employees, who utilized 20 percent of their work time to patch over 2600 open source projects on Github. The ACC Library is widely deployed by many Java applications to decode data passed between computers. To exploit this flaw, all an unauthorized attacker need to do is submit maliciously crafted input to an application on a targeted system that uses the ACC library.
Source: https://thehackernews.com/2017/03/google-mad-gadget-flaw.html