{"id":100107,"date":"2021-05-06T16:22:47","date_gmt":"2021-05-06T14:22:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty"},"modified":"2021-05-06T16:22:47","modified_gmt":"2021-05-06T14:22:47","slug":"razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty","title":{"rendered":"A Linux kernel fejleszt\u0151i befejezt\u00e9k a Minnesota Egyetem \u00f6sszes patch\u00e9nek audit\u00e1l\u00e1s\u00e1t","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A Linux Foundation technical advisory board has published a summary report analyzing the incident involving researchers from the University of Minnesota regarding an attempt to introduce patches with hidden bugs that lead to vulnerabilities into the kernel. Kernel developers confirmed previously published information that out of the five patches prepared during the 'Hypocrite Commits' research, four patches with vulnerabilities were immediately rejected at the initiative of the maintainers and did not make it into the kernel repository. One patch was accepted, but it correctly fixed the issue and contained no bugs. <\/p>\n
A total of 435 commits were also analyzed, including fixes sent by developers from the University of Minnesota that were not related to the experiment of promoting hidden vulnerabilities. Since 2018, the group of researchers from the University of Minnesota has been actively involved in bug fixing. The re-review did not reveal any malicious activity in these commits but uncovered some unintentional mistakes and oversights. <\/p>\n
349 commits were recognized as correct and left unchanged. Problems requiring fixes were found in 39 commits \u2014 these commits have been canceled and will be replaced with more accurate fixes before the release of kernel 5.13. Errors in 25 commits have been corrected in subsequent changes. 12 commits became irrelevant as they dealt with outdated systems that have already been removed from the kernel. One of the valid commits was canceled at the author's request. 9 valid commits were sent from @umn.edu addresses long before the formation of the research group under discussion. <\/p>\n
To restore trust in the team from the University of Minnesota and allow their participation in kernel development, the Linux Foundation has set forth a number of requirements, the majority of which have already been fulfilled. For example, the researchers have withdrawn the publication 'Hypocrite Commits' and canceled their presentation at the IEEE Symposium, as well as publicly disclosed the entire chronology of events and provided detailed information about the changes submitted during the research. \n Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"