| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update for functional issues for different processors
Fixes CVEs:
CVE-2024-31068 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html]
CVE-2024-36293 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html]
CVE-2023-43758 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html]
CVE-2024-39355 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html]
CVE-2024-37020 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01194.html]
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250211
Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update for functional issues for different processors
Fixes CVEs:
CVE-2024-21853 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html]
CVE-2024-23918 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html]
CVE-2024-21820 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html]
CVE-2024-24968 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html]
CVE-2024-23984 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html]
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-2024112
Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
| |
Update for functional issues for different processors
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20241029
Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update for functional issues for different processors
Fixes CVEs:
CVE-2024-23984 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html]
CVE-2024-24968 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html]
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240910
Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update for functional issues for different processors
Fixes CVEs:
CVE-2024-24853 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html]
CVE-2024-25939 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html]
CVE-2024-24980 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html]
CVE-2023-42667 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html]
CVE-2023-49141 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html]
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240813
Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
| |
Fixes functional issues for GLK. Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240531
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240514
Fixes CVEs:
CVE-2023-45733 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html]
CVE-2023-46103 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html]
CVE-2023-45745,CVE-2023-47855 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html]
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240312
Fixes CVEs:
CVE-2023-39368 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html]
CVE-2023-38575 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html]
CVE-2023-28746 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html]
CVE-2023-22655 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html]
CVE-2023-43490 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html]
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20231114
Fixes CVE-2023-23583. Details:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20230808
Also fixes CVE-2022-40982, CVE-2023-23908 and CVE-2022-41804.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20230512
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20230214
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20221108
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
| |
Fixes CVE-2022-21233.
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220809
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The commit 6c0c4691e5bb446e0e428ebca595164709c59586 is missing in upstream
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files.
Reference:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/62.
Use 925555515555 instead of 6c0c4691e5bb. The difference between those
two commits are just some "^M" fixes in releasenote.md.
Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
intel-microcode-20220510 includes fixes for CVE-2021-33117 and CVE-2022-21151.
CVE-2021-33117:
A potential security vulnerability in some 3rd Generation Intel® Xeon® Scalable
Processors may allow information disclosure. Intel is releasing firmware
updates to mitigate this potential vulnerability.
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00586.html
CVE-2022-21151:
A potential security vulnerability in some Intel® Processors may allow
information disclosure. Intel is releasing firmware updates to mitigate this
potential vulnerability.
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
| |
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Switch to using SPDX preferred identifiers. All changes done using v0.1
of the script convert-spdx-licenses.py.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
| |
Also fixes CVE-2021-0146, CVE-2021-0127. More details:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220207
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Commit cba66dfb7bb9 ("intel-microcode: fix microcode loading on newer
kernels") effectively disabled microcode filtering for intel-microcode
package.
Add the missing filter parameter to iucode_tool command to install only
necessary files. Do not generate microcode bin file in compile step as
it is no longer needed.
Signed-off-by: Tomasz Moń <tomasz.mon@camlingroup.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Use the convert-overrides.py to convert to new syntax and manually
fix some additional changes.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20210608
Fixes CVE-2021-24489, CVE-2020-24511, CVE-2020-24512, CVE-2020-24513.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
| |
The upgrade was pushed without the correct license md5sum. Fix it now.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20210216
Fixes CVE-2020-8698, CVE-2020-8696
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20201118
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Updates microcode for one more platform:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20201112
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20201110
Fixes: CVE-2020-8696 CVE-2020-8698 CVE-2020-8695 CVE-2020-8694
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Upstream has made 'main' the default branch so make the branch name
explicit.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/0e4288f81f806620c65f70ee2bcf94b69d574096/releasenote
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/021c295269a06159b8c3ebefc0fac932e69e259e/releasenote
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/437f382b1be4412b9d03e2bbdcda46d83d581242/releasenote
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/d6e1db6755da2d682f4558d1723f16f26575c4d1/releasenote
License-Update: Change in Copyright year
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20191115
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
For changes in this release, see:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20191112
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/5ada2f32ed7d216e38823f1320358e4679941990/releasenote
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
| |
There could be zero or more characaters at the end of version string.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The /dev/microcode interface and microcode-ctl utility has
been deprecated in favor of the new kernel
/sys/devices/system/cpu/microcode/reload interface as documented in:
https://github.com/torvalds/linux/blob/master/Documentation/x86/microcode.rst
It expects the microcode binaries to be split out and loaded from
/lib/firmware, eg:
/lib/firmware/intel-ucode/06-01-01
/lib/firmware/intel-ucode/06-01-02
/lib/firmware/intel-ucode/06-01-06
/lib/firmware/intel-ucode/06-01-07
/lib/firmware/intel-ucode/06-01-09
...
This change does not affect the earlyfw cpio generated by inte-ucode.
Signed-off-by: Yong, Jonathan <jonathan.yong@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
| |
For changes in this version, see:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/940d904b7272edd689a5f0eef9dee09c13746748/releasenote
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
There could be a character to signify minor changes for the same
microcode at the end.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
|
| |
Include the microcode from caveats as well since all kernels supported
have those patches. Also point to the new git repo and corrected
license.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
| |
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
| |
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
Point to the the license from layer now that text .dat isn't supplied. And,
generate cpio from binary files.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
| |
License-Update: Change in copyright year.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
|
|
|
|
|
|
|
| |
The LIC_FILES_CHKSUM also needed to be updated, as the copyright
added the year 2018.
Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
|
|
|
|
|
|
|
|
|
| |
This reverts commit 7969d8e442bdefd8036a334ca9d9ce133272399b.
Its recommended that rollout of this microcode update is suspended. See here:
https://newsroom.intel.com/news/root-cause-of-reboot-issue-identified-updated-guidance-for-customers-and-partners/
Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
|
|
|
|
|
| |
Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
|
|
|
|
|
|
|
|
| |
This update contains ...
No Actual license change, just date.
Signed-off-by: Saul Wold <sgw@linux.intel.com>
|
|
Remove the concept of the common directory and move all the recipes-* dirs
to the top level as a normal layer would be. layer.conf is updated appropriately
Signed-off-by: Saul Wold <sgw@linux.intel.com>
|