Year 2038 time set problem

Sun Mar 4 01:59:46 EST 2018

It is not secure because it is not fixed for these issues:
https://meltdownattack.com/
If you're CPU is not listed there (unlikely) or your use case does not need that much security( depending on your application) you can stay with 4.1.

Fixing these vulnerabilities is a lot of work and no one will fix them for old OS.

Tali Perry

-----Original Message-----
From: kernelnewbies-request at kernelnewbies.org [mailto:kernelnewbies-request at kernelnewbies.org]
Sent: Thursday, March 1, 2018 7:00 PM
To: kernelnewbies at kernelnewbies.org
Subject: Kernelnewbies Digest, Vol 88, Issue 1

Send Kernelnewbies mailing list submissions to
kernelnewbies at kernelnewbies.org

To subscribe or unsubscribe via the World Wide Web, visit
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kernelnewbies.org_mailman_listinfo_kernelnewbies&d=DwICAg&c=ue8mO8zgC4VZ4q_aNVKt8G9MC01UFDmisvMR1k-EoDM&r=5-jOvjYshFdcjobN4MAbTtpuvsF8AX3cHai1kFhWbCo&m=5WHSMfKEgDeA1L5AJ0SixtlVmggN8l66pLQJV_mbEPo&s=yn9lHYs-jhadLZh1tVPLrBb9Zk1cllKS9CbE_J3_ITQ&e=
or, via email, send a message with subject or body 'help' to
kernelnewbies-request at kernelnewbies.org

You can reach the person managing the list at
kernelnewbies-owner at kernelnewbies.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of Kernelnewbies digest..."

Today's Topics:

   1. Re: Year 2038 time set problem (techi eth)
   2. Re: Year 2038 time set problem (Greg KH)

----------------------------------------------------------------------

Message: 1
Date: Thu, 1 Mar 2018 14:49:05 +0530
From: techi eth <techieth at gmail.com>
To: Greg KH <greg at kroah.com>
Cc: Valdis Kletnieks <valdis.kletnieks at vt.edu>,
kernelnewbies at kernelnewbies.org
Subject: Re: Year 2038 time set problem
Message-ID:
<CAJw2sSAJBKBR33sLdM285LbRfJTWrZwSDJQUnNzYju6QQTErqw at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

I am just trying to know why 4.1 kernel is insecure ? I have try to look but not able to get right answer.

Could you please give me hint or link. I only see it is going to EOL by May 2018.

https://urldefense.proofpoint.com/v2/url?u=https-3A__www.kernel.org_category_releases.html&d=DwICAg&c=ue8mO8zgC4VZ4q_aNVKt8G9MC01UFDmisvMR1k-EoDM&r=5-jOvjYshFdcjobN4MAbTtpuvsF8AX3cHai1kFhWbCo&m=5WHSMfKEgDeA1L5AJ0SixtlVmggN8l66pLQJV_mbEPo&s=apTb5GBuyMFf5VtDS12PkFJxZdN_PGgur3KES7GW5LI&e=

Thanks

On Sat, Feb 24, 2018 at 9:20 PM, Greg KH <greg at kroah.com> wrote:

> On Sat, Feb 24, 2018 at 07:29:35PM +0530, techi eth wrote:
> > I am trying on 32 Bit micro board with ubifs file system with Linux
> Kernel
> > 4.1.
>
> And in your testing, did you find any problems?
>
> Also note that the 4.1 kernel is very old and obsolete and insecure,
> and should NOT be used for any devices in the year 2038.
>
> best of luck!
>
> greg k-h
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.kernelnewbies.org_pipermail_kernelnewbies_attachments_20180301_13cb2216_attachment-2D0001.html&d=DwICAg&c=ue8mO8zgC4VZ4q_aNVKt8G9MC01UFDmisvMR1k-EoDM&r=5-jOvjYshFdcjobN4MAbTtpuvsF8AX3cHai1kFhWbCo&m=5WHSMfKEgDeA1L5AJ0SixtlVmggN8l66pLQJV_mbEPo&s=1Gfz5A_quFFmclyBIGvBEHg-YdY2U0ZB5yErBWtd7C4&e= >

------------------------------

Message: 2
Date: Thu, 1 Mar 2018 13:04:14 +0100
From: Greg KH <greg at kroah.com>
To: techi eth <techieth at gmail.com>
Cc: Valdis Kletnieks <valdis.kletnieks at vt.edu>,
kernelnewbies at kernelnewbies.org
Subject: Re: Year 2038 time set problem
Message-ID: <20180301120414.GB31299 at kroah.com>
Content-Type: text/plain; charset=us-ascii

On Thu, Mar 01, 2018 at 02:49:05PM +0530, techi eth wrote:
> I am just trying to know why 4.1 kernel is insecure ? I have try to
> look but not able to get right answer.
>
> Could you please give me hint or link. I only see it is going to EOL
> by May 2018.
>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.kernel.org_ca
> tegory_releases.html&d=DwICAg&c=ue8mO8zgC4VZ4q_aNVKt8G9MC01UFDmisvMR1k
> -EoDM&r=5-jOvjYshFdcjobN4MAbTtpuvsF8AX3cHai1kFhWbCo&m=5WHSMfKEgDeA1L5A
> J0SixtlVmggN8l66pLQJV_mbEPo&s=apTb5GBuyMFf5VtDS12PkFJxZdN_PGgur3KES7GW
> 5LI&e=

Yes, why would you use a kernel that is going to be end-of-life in a few months, in the year 2038?  What is going to keep it "secure" until then?

thanks,

greg k-h

------------------------------

Subject: Digest Footer

_______________________________________________
Kernelnewbies mailing list
Kernelnewbies at kernelnewbies.org
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kernelnewbies.org_mailman_listinfo_kernelnewbies&d=DwICAg&c=ue8mO8zgC4VZ4q_aNVKt8G9MC01UFDmisvMR1k-EoDM&r=5-jOvjYshFdcjobN4MAbTtpuvsF8AX3cHai1kFhWbCo&m=5WHSMfKEgDeA1L5AJ0SixtlVmggN8l66pLQJV_mbEPo&s=yn9lHYs-jhadLZh1tVPLrBb9Zk1cllKS9CbE_J3_ITQ&e=

------------------------------

End of Kernelnewbies Digest, Vol 88, Issue 1
********************************************

===========================================================================================
The privileged confidential information contained in this email is intended for use only by the addressees as indicated by the original sender of this email. If you are not the addressee indicated in this email or are not responsible for delivery of the email to such a person, please kindly reply to the sender indicating this fact and delete all copies of it from your computer and network server immediately. Your cooperation is highly appreciated. It is advised that any unauthorized use of confidential information of Nuvoton is strictly prohibited; and any information in this email irrelevant to the official business of Nuvoton shall be deemed as neither given nor endorsed by Nuvoton.