It is not secure because it is not fixed for these issues: https://meltdownattack.com/ If you're CPU is not listed there (unlikely) or your use case does not need that much security( depending on your application) you can stay with 4.1. Fixing these vulnerabilities is a lot of work and no one will fix them for old OS. Tali Perry -----Original Message----- From: kernelnewbies-request@xxxxxxxxxxxxxxxxx [mailto:kernelnewbies-request@xxxxxxxxxxxxxxxxx] Sent: Thursday, March 1, 2018 7:00 PM To: kernelnewbies@xxxxxxxxxxxxxxxxx Subject: Kernelnewbies Digest, Vol 88, Issue 1 Send Kernelnewbies mailing list submissions to kernelnewbies@xxxxxxxxxxxxxxxxx To subscribe or unsubscribe via the World Wide Web, visit https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kernelnewbies.org_mailman_listinfo_kernelnewbies&d=DwICAg&c=ue8mO8zgC4VZ4q_aNVKt8G9MC01UFDmisvMR1k-EoDM&r=5-jOvjYshFdcjobN4MAbTtpuvsF8AX3cHai1kFhWbCo&m=5WHSMfKEgDeA1L5AJ0SixtlVmggN8l66pLQJV_mbEPo&s=yn9lHYs-jhadLZh1tVPLrBb9Zk1cllKS9CbE_J3_ITQ&e= or, via email, send a message with subject or body 'help' to kernelnewbies-request@xxxxxxxxxxxxxxxxx You can reach the person managing the list at kernelnewbies-owner@xxxxxxxxxxxxxxxxx When replying, please edit your Subject line so it is more specific than "Re: Contents of Kernelnewbies digest..." Today's Topics: 1. Re: Year 2038 time set problem (techi eth) 2. Re: Year 2038 time set problem (Greg KH) ---------------------------------------------------------------------- Message: 1 Date: Thu, 1 Mar 2018 14:49:05 +0530 From: techi eth <techieth@xxxxxxxxx> To: Greg KH <greg@xxxxxxxxx> Cc: Valdis Kletnieks <valdis.kletnieks@xxxxxx>, kernelnewbies@xxxxxxxxxxxxxxxxx Subject: Re: Year 2038 time set problem Message-ID: <CAJw2sSAJBKBR33sLdM285LbRfJTWrZwSDJQUnNzYju6QQTErqw@xxxxxxxxxxxxxx> Content-Type: text/plain; charset="utf-8" I am just trying to know why 4.1 kernel is insecure ? I have try to look but not able to get right answer. Could you please give me hint or link. I only see it is going to EOL by May 2018. https://urldefense.proofpoint.com/v2/url?u=https-3A__www.kernel.org_category_releases.html&d=DwICAg&c=ue8mO8zgC4VZ4q_aNVKt8G9MC01UFDmisvMR1k-EoDM&r=5-jOvjYshFdcjobN4MAbTtpuvsF8AX3cHai1kFhWbCo&m=5WHSMfKEgDeA1L5AJ0SixtlVmggN8l66pLQJV_mbEPo&s=apTb5GBuyMFf5VtDS12PkFJxZdN_PGgur3KES7GW5LI&e= Thanks On Sat, Feb 24, 2018 at 9:20 PM, Greg KH <greg@xxxxxxxxx> wrote: > On Sat, Feb 24, 2018 at 07:29:35PM +0530, techi eth wrote: > > I am trying on 32 Bit micro board with ubifs file system with Linux > Kernel > > 4.1. > > And in your testing, did you find any problems? > > Also note that the 4.1 kernel is very old and obsolete and insecure, > and should NOT be used for any devices in the year 2038. > > best of luck! > > greg k-h > -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.kernelnewbies.org_pipermail_kernelnewbies_attachments_20180301_13cb2216_attachment-2D0001.html&d=DwICAg&c=ue8mO8zgC4VZ4q_aNVKt8G9MC01UFDmisvMR1k-EoDM&r=5-jOvjYshFdcjobN4MAbTtpuvsF8AX3cHai1kFhWbCo&m=5WHSMfKEgDeA1L5AJ0SixtlVmggN8l66pLQJV_mbEPo&s=1Gfz5A_quFFmclyBIGvBEHg-YdY2U0ZB5yErBWtd7C4&e= > ------------------------------ Message: 2 Date: Thu, 1 Mar 2018 13:04:14 +0100 From: Greg KH <greg@xxxxxxxxx> To: techi eth <techieth@xxxxxxxxx> Cc: Valdis Kletnieks <valdis.kletnieks@xxxxxx>, kernelnewbies@xxxxxxxxxxxxxxxxx Subject: Re: Year 2038 time set problem Message-ID: <20180301120414.GB31299@xxxxxxxxx> Content-Type: text/plain; charset=us-ascii On Thu, Mar 01, 2018 at 02:49:05PM +0530, techi eth wrote: > I am just trying to know why 4.1 kernel is insecure ? I have try to > look but not able to get right answer. > > Could you please give me hint or link. I only see it is going to EOL > by May 2018. > > https://urldefense.proofpoint.com/v2/url?u=https-3A__www.kernel.org_ca > tegory_releases.html&d=DwICAg&c=ue8mO8zgC4VZ4q_aNVKt8G9MC01UFDmisvMR1k > -EoDM&r=5-jOvjYshFdcjobN4MAbTtpuvsF8AX3cHai1kFhWbCo&m=5WHSMfKEgDeA1L5A > J0SixtlVmggN8l66pLQJV_mbEPo&s=apTb5GBuyMFf5VtDS12PkFJxZdN_PGgur3KES7GW > 5LI&e= Yes, why would you use a kernel that is going to be end-of-life in a few months, in the year 2038? What is going to keep it "secure" until then? thanks, greg k-h ------------------------------ Subject: Digest Footer _______________________________________________ Kernelnewbies mailing list Kernelnewbies@xxxxxxxxxxxxxxxxx https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kernelnewbies.org_mailman_listinfo_kernelnewbies&d=DwICAg&c=ue8mO8zgC4VZ4q_aNVKt8G9MC01UFDmisvMR1k-EoDM&r=5-jOvjYshFdcjobN4MAbTtpuvsF8AX3cHai1kFhWbCo&m=5WHSMfKEgDeA1L5AJ0SixtlVmggN8l66pLQJV_mbEPo&s=yn9lHYs-jhadLZh1tVPLrBb9Zk1cllKS9CbE_J3_ITQ&e= ------------------------------ End of Kernelnewbies Digest, Vol 88, Issue 1 ******************************************** =========================================================================================== The privileged confidential information contained in this email is intended for use only by the addressees as indicated by the original sender of this email. If you are not the addressee indicated in this email or are not responsible for delivery of the email to such a person, please kindly reply to the sender indicating this fact and delete all copies of it from your computer and network server immediately. Your cooperation is highly appreciated. It is advised that any unauthorized use of confidential information of Nuvoton is strictly prohibited; and any information in this email irrelevant to the official business of Nuvoton shall be deemed as neither given nor endorsed by Nuvoton. _______________________________________________ Kernelnewbies mailing list Kernelnewbies@xxxxxxxxxxxxxxxxx https://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
