{"id":100107,"date":"2021-05-06T16:22:47","date_gmt":"2021-05-06T14:22:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty"},"modified":"2021-05-06T16:22:47","modified_gmt":"2021-05-06T14:22:47","slug":"razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty","title":{"rendered":"Dezvoltatorii kernel-ului Linux au finalizat auditul tuturor patch-urilor de la Universitatea Minnesota.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Consiliul tehnic al organiza\u021biei Linux Foundation a publicat un raport sumar care analizeaz\u0103 incidentul cu cercet\u0103torii de la Universitatea Minnesota, legat de \u00eencercarea de a promova \u00een kernel patch-uri con\u021bin\u00e2nd erori ascunse, care duc la vulnerabilit\u0103\u021bi. Dezvoltatorii kernel-ului au confirmat informa\u021biile publicate anterior c\u0103 din cele 5 patch-uri preg\u0103tite \u00een cadrul cercet\u0103rii «Hypocrite Commits», 4 patch-uri cu vulnerabilit\u0103\u021bi au fost respinse imediat, la ini\u021biativa men\u021bin\u0103torilor, \u0219i nu au ajuns \u00een repository-ul kernel-ului. Un patch a fost acceptat, dar a corectat corect problema \u0219i nu con\u021binea erori. <\/p>\n

De asemenea, au fost analizate 435 de commit-uri, inclusiv remedieri trimise de dezvoltatorii de la Universitatea Minnesota \u0219i care nu erau legate de desf\u0103\u0219urarea experimentului pentru promovarea vulnerabilit\u0103\u021bilor ascunse. Din 2018, grupul de cercet\u0103tori de la Universitatea Minnesota a participat activ la corectarea erorilor. Reevaluarea nu a dezv\u0103luit activitate mali\u021bioas\u0103 \u00een aceste commit-uri, dar a scos la iveal\u0103 unele erori neinten\u021bionate \u0219i omisiuni. <\/p>\n

349 de commituri au fost recunoscute ca fiind corecte \u0219i l\u0103sate neschimbate. \u00cen 39 de commituri s-au descoperit probleme care necesit\u0103 corectare \u2014 aceste commituri au fost anulate \u0219i p\u00e2n\u0103 la lansarea kernel-ului 5.13 vor fi \u00eenlocuite cu corecturi mai adecvate. Erorile din 25 de commituri au fost corectate \u00een schimb\u0103ri ulterioare. 12 commituri au devenit neactuale, deoarece se refereau la sisteme desuete, deja eliminate din kernel. Unul dintre commiturile corecte a fost anulat la cererea autorului. 9 commituri corecte au fost trimise de pe adresele @umn.edu cu mult \u00eenainte de formarea grupului de cercetare analizat. <\/p>\n

Pentru a restabili \u00eencrederea \u00een echipa de la Universitatea Minnesota \u0219i a reveni la participarea \u00een dezvoltarea kernel-ului, organiza\u021bia Linux Foundation a formulat o serie de cerin\u021be, majoritatea dintre care au fost deja \u00eendeplinite. De exemplu, cercet\u0103torii au retras deja publica\u021bia «Hypocrite Commits» \u0219i \u0219i-au anulat prezentarea la conferin\u021ba IEEE Symposium, precum \u0219i au dezv\u0103luit public \u00eentreaga cronologie a evenimentelor \u0219i au furnizat informa\u021bii detaliate despre modific\u0103rile trimise \u00een timpul cercet\u0103rii.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0441\u043e\u0432\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Foundation \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u0432\u043e\u0434\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 \u0441 \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0441 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043f\u043e\u043f\u044b\u0442\u043a\u043e\u0439 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u043e \u043f\u0430\u0442\u0447\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0435 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u044f\u0434\u0440\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u0437 5 \u043f\u0430\u0442\u0447\u0435\u0439, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f «Hypocrite Commits», 4 \u043f\u0430\u0442\u0447\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0431\u044b\u043b\u0438 \u043e\u0442\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044b \u0441\u0440\u0430\u0437\u0443 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100107","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dezvoltatorii kernel-ului Linux au finalizat auditul tuturor patch-urilor de la Universitatea Minnesota | ProHoster","description":"Consiliul tehnic al organiza\u021biei Linux Foundation a publicat un raport sumar despre incidentul cu cercet\u0103torii de la Universitatea Minnesota, legat de tentativa de a promova kernel-ului patch-uri care con\u021bin erori ascunse.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u044f\u0434\u0440\u0430 Linux \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b\u0438 \u0430\u0443\u0434\u0438\u0442 \u0432\u0441\u0435\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u043e\u0442 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b | ProHoster","og:description":"\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0441\u043e\u0432\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Foundation \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u0432\u043e\u0434\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 \u0441 \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0441 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043f\u043e\u043f\u044b\u0442\u043a\u043e\u0439 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u043e \u043f\u0430\u0442\u0447\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/razrabotchiki-yadra-linux-zavershili-audit-vseh-patchej-ot-universiteta-minnesoty","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-05-06T14:22:47+00:00","article:modified_time":"2021-05-06T14:22:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100107","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-05-06 14:58:08","updated":"2022-10-09 21:31:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100107","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=100107"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100107\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=100107"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=100107"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=100107"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}