{"id":100107,"date":"2021-05-06T16:22:47","date_gmt":"2021-05-06T14:22:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty"},"modified":"2021-05-06T16:22:47","modified_gmt":"2021-05-06T14:22:47","slug":"razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty","title":{"rendered":"Linux kernel developers have completed the audit of all patches from the University of Minnesota","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The technical advisory board of the Linux Foundation published a summary report analyzing the incident with researchers from the University of Minnesota regarding their attempt to push patches containing hidden bugs that lead to vulnerabilities into the kernel. Kernel developers confirmed previously published information that out of the 5 patches prepared during the \"Hypocrite Commits\" investigation, 4 vulnerability-laden patches were immediately rejected at the initiative of the maintainers and did not make it into the kernel repository. One patch was accepted, but it correctly addressed the issue and contained no errors. <\/p>\n
Additionally, 435 commits were analyzed, which included fixes sent by developers from the University of Minnesota that were not related to the experiments on promoting hidden vulnerabilities. Since 2018, the group of researchers from the University of Minnesota has been actively involved in bug fixing. A re-review did not reveal any malicious activity in these commits but uncovered some unintentional errors and shortcomings. <\/p>\n
349 commits were deemed valid and left unchanged. 39 commits were found to have issues that need fixing \u2014 these commits have been revoked and will be replaced with more accurate corrections before the release of kernel 5.13. The errors in 25 commits were corrected in subsequent changes. 12 commits became irrelevant as they pertained to outdated systems that have already been removed from the kernel. One of the valid commits was revoked at the author's request. 9 valid commits were sent from @umn.edu addresses long before the formation of the reviewed group of researchers. <\/p>\n
To restore trust in the team from the University of Minnesota and allow their participation in kernel development, the Linux Foundation has put forward a number of requirements, most of which have already been fulfilled. For instance, researchers have retracted the publication of \"Hypocrite Commits\" and canceled their presentation at the IEEE Symposium, as well as publicly disclosed the entire timeline of events and provided detailed information about the changes submitted during the investigation. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"