what are the specific actions that the university has to take that were mentioned here?
I would imagine the kernel folks wouldn't be apt to make it public since it would draw even more attention to this than really needs to be brought, at least from the university's perspective. It would start to smell a bit of airing dirty laundry.
The damage has already been done. There's no need to make it worse.