|
|
|
@ -1,6 +1,5 @@ |
|
|
|
%define upstream_version 2.1-18 |
|
|
|
%define upstream_version 2.1-18 |
|
|
|
%define intel_ucode_version 20191112 |
|
|
|
%define intel_ucode_version 20200602 |
|
|
|
%define intel_ucode_file_id 28727 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%define caveat_dir %{_datarootdir}/microcode_ctl/ucode_with_caveats |
|
|
|
%define caveat_dir %{_datarootdir}/microcode_ctl/ucode_with_caveats |
|
|
|
%define microcode_ctl_libexec %{_libexecdir}/microcode_ctl |
|
|
|
%define microcode_ctl_libexec %{_libexecdir}/microcode_ctl |
|
|
|
@ -22,16 +21,19 @@ |
|
|
|
Summary: Tool to transform and deploy CPU microcode update for x86. |
|
|
|
Summary: Tool to transform and deploy CPU microcode update for x86. |
|
|
|
Name: microcode_ctl |
|
|
|
Name: microcode_ctl |
|
|
|
Version: 2.1 |
|
|
|
Version: 2.1 |
|
|
|
Release: 53.3%{?dist} |
|
|
|
Release: 61.6%{?dist} |
|
|
|
Epoch: 2 |
|
|
|
Epoch: 2 |
|
|
|
Group: System Environment/Base |
|
|
|
Group: System Environment/Base |
|
|
|
License: GPLv2+ and Redistributable, no modification permitted |
|
|
|
License: GPLv2+ and Redistributable, no modification permitted |
|
|
|
URL: https://pagure.io/microcode_ctl |
|
|
|
URL: https://pagure.io/microcode_ctl |
|
|
|
Source0: https://releases.pagure.org/microcode_ctl/%{name}-%{upstream_version}.tar.xz |
|
|
|
Source0: https://releases.pagure.org/microcode_ctl/%{name}-%{upstream_version}.tar.xz |
|
|
|
Source1: microcode-%{intel_ucode_version}.pre.tar.gz |
|
|
|
Source1: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/archive/microcode-%{intel_ucode_version}.tar.gz |
|
|
|
# (Pre-MDS) revision 0x714 of 06-2d-07 microcode |
|
|
|
# (Pre-MDS) revision 0x714 of 06-2d-07 microcode |
|
|
|
Source2: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/raw/microcode-20190514/intel-ucode/06-2d-07 |
|
|
|
Source2: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/raw/microcode-20190514/intel-ucode/06-2d-07 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# (Pre-20191112) revision 0x2000064 of 06-55-04 microcode |
|
|
|
|
|
|
|
Source3: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/raw/microcode-20190918/intel-ucode/06-55-04 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# systemd unit |
|
|
|
# systemd unit |
|
|
|
Source10: microcode.service |
|
|
|
Source10: microcode.service |
|
|
|
@ -72,6 +74,12 @@ Source120: 06-2d-07_readme |
|
|
|
Source121: 06-2d-07_config |
|
|
|
Source121: 06-2d-07_config |
|
|
|
Source122: 06-2d-07_disclaimer |
|
|
|
Source122: 06-2d-07_disclaimer |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# SKL-SP/W/X (CPUID 0x50654) post-20191112 hangs |
|
|
|
|
|
|
|
# https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/21 |
|
|
|
|
|
|
|
Source130: 06-55-04_readme |
|
|
|
|
|
|
|
Source131: 06-55-04_config |
|
|
|
|
|
|
|
Source132: 06-55-04_disclaimer |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# "Provides:" RPM tags generator |
|
|
|
# "Provides:" RPM tags generator |
|
|
|
Source200: gen_provides.sh |
|
|
|
Source200: gen_provides.sh |
|
|
|
@ -86,10 +94,13 @@ Patch6: microcode_ctl-ignore-first-directory-level-in-archive.patch |
|
|
|
Buildroot: %{_tmppath}/%{name}-%{version}-root |
|
|
|
Buildroot: %{_tmppath}/%{name}-%{version}-root |
|
|
|
ExclusiveArch: %{ix86} x86_64 |
|
|
|
ExclusiveArch: %{ix86} x86_64 |
|
|
|
BuildRequires: systemd-units |
|
|
|
BuildRequires: systemd-units |
|
|
|
Requires(post): systemd |
|
|
|
# hexdump is used in gen_provides.sh |
|
|
|
Requires(preun): systemd |
|
|
|
BuildRequires: coreutils util-linux |
|
|
|
Requires(postun): systemd |
|
|
|
Requires: coreutils |
|
|
|
Requires(posttrans): kernel |
|
|
|
Requires(post): systemd coreutils |
|
|
|
|
|
|
|
Requires(preun): systemd coreutils |
|
|
|
|
|
|
|
Requires(postun): systemd coreutils |
|
|
|
|
|
|
|
Requires(posttrans): dracut coreutils |
|
|
|
|
|
|
|
|
|
|
|
%global _use_internal_dependency_generator 0 |
|
|
|
%global _use_internal_dependency_generator 0 |
|
|
|
%define __find_provides "%{SOURCE200}" |
|
|
|
%define __find_provides "%{SOURCE200}" |
|
|
|
@ -104,6 +115,10 @@ back to the old microcode. |
|
|
|
|
|
|
|
|
|
|
|
%prep |
|
|
|
%prep |
|
|
|
%setup -q -n %{name}-%{upstream_version} |
|
|
|
%setup -q -n %{name}-%{upstream_version} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
tar xf "%{SOURCE1}" --wildcards --strip-components=1 \ |
|
|
|
|
|
|
|
\*/intel-ucode-with-caveats \*/license \*/releasenote |
|
|
|
|
|
|
|
|
|
|
|
%patch1 -p1 |
|
|
|
%patch1 -p1 |
|
|
|
%patch2 -p1 |
|
|
|
%patch2 -p1 |
|
|
|
|
|
|
|
|
|
|
|
@ -131,18 +146,19 @@ make CFLAGS="$RPM_OPT_FLAGS" %{?_smp_mflags} |
|
|
|
#find intel-ucode -type f | sed 's/^/%%ghost \/lib\/firmware\//' > ghost_list |
|
|
|
#find intel-ucode -type f | sed 's/^/%%ghost \/lib\/firmware\//' > ghost_list |
|
|
|
touch ghost_list |
|
|
|
touch ghost_list |
|
|
|
|
|
|
|
|
|
|
|
tar xf "%{SOURCE1}" --wildcards --strip-components=1 \ |
|
|
|
|
|
|
|
\*/intel-ucode-with-caveats \*/license \*/releasenote |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# replacing SNB-EP (CPUID 0x206d7) microcode with pre-MDS version |
|
|
|
# replacing SNB-EP (CPUID 0x206d7) microcode with pre-MDS version |
|
|
|
mv intel-ucode/06-2d-07 intel-ucode-with-caveats/ |
|
|
|
mv intel-ucode/06-2d-07 intel-ucode-with-caveats/ |
|
|
|
cp "%{SOURCE2}" intel-ucode/ |
|
|
|
cp "%{SOURCE2}" intel-ucode/ |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# replacing SKL-SP/W/X (CPUID 0x50654) microcode with pre-20191112 version |
|
|
|
|
|
|
|
mv intel-ucode/06-55-04 intel-ucode-with-caveats/ |
|
|
|
|
|
|
|
cp "%{SOURCE3}" intel-ucode/ |
|
|
|
|
|
|
|
|
|
|
|
# man page |
|
|
|
# man page |
|
|
|
sed "%{SOURCE40}" \ |
|
|
|
sed "%{SOURCE40}" \ |
|
|
|
-e "s/@DATE@/2019-05-09/g" \ |
|
|
|
-e "s/@DATE@/2019-05-09/g" \ |
|
|
|
-e "s/@VERSION@/%{version}-%{release}/g" \ |
|
|
|
-e "s/@VERSION@/%{version}-%{release}/g" \ |
|
|
|
-e "s|@MICROCODE_URL@|https://downloadcenter.intel.com/download/%{intel_ucode_file_id}|g" > "%{i_m2u_man}" |
|
|
|
-e "s|@MICROCODE_URL@|https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files|g" > "%{i_m2u_man}" |
|
|
|
|
|
|
|
|
|
|
|
%install |
|
|
|
%install |
|
|
|
rm -rf %{buildroot} |
|
|
|
rm -rf %{buildroot} |
|
|
|
@ -188,7 +204,7 @@ install -m 644 releasenote \ |
|
|
|
"%{buildroot}/%{_pkgdocdir}/RELEASE_NOTES.intel-ucode" |
|
|
|
"%{buildroot}/%{_pkgdocdir}/RELEASE_NOTES.intel-ucode" |
|
|
|
|
|
|
|
|
|
|
|
# caveats |
|
|
|
# caveats |
|
|
|
install -m 644 "%{SOURCE100}" "%{SOURCE110}" "%{SOURCE120}" \ |
|
|
|
install -m 644 "%{SOURCE100}" "%{SOURCE110}" "%{SOURCE120}" "%{SOURCE130}" \ |
|
|
|
-t "%{buildroot}/%{_pkgdocdir}/caveats/" |
|
|
|
-t "%{buildroot}/%{_pkgdocdir}/caveats/" |
|
|
|
|
|
|
|
|
|
|
|
# Man page |
|
|
|
# Man page |
|
|
|
@ -222,9 +238,18 @@ install -m 644 "%{SOURCE120}" "%{snb_inst_dir}/readme" |
|
|
|
install -m 644 "%{SOURCE121}" "%{snb_inst_dir}/config" |
|
|
|
install -m 644 "%{SOURCE121}" "%{snb_inst_dir}/config" |
|
|
|
install -m 644 "%{SOURCE122}" "%{snb_inst_dir}/disclaimer" |
|
|
|
install -m 644 "%{SOURCE122}" "%{snb_inst_dir}/disclaimer" |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# SKL-SP caveat |
|
|
|
|
|
|
|
%define skl_inst_dir %{buildroot}/%{caveat_dir}/intel-06-55-04/ |
|
|
|
|
|
|
|
install -m 755 -d "%{skl_inst_dir}/intel-ucode" |
|
|
|
|
|
|
|
install -m 644 intel-ucode-with-caveats/06-55-04 -t "%{skl_inst_dir}/intel-ucode/" |
|
|
|
|
|
|
|
install -m 644 "%{SOURCE130}" "%{skl_inst_dir}/readme" |
|
|
|
|
|
|
|
install -m 644 "%{SOURCE131}" "%{skl_inst_dir}/config" |
|
|
|
|
|
|
|
install -m 644 "%{SOURCE132}" "%{skl_inst_dir}/disclaimer" |
|
|
|
|
|
|
|
|
|
|
|
# Cleanup |
|
|
|
# Cleanup |
|
|
|
rm -f intel-ucode-with-caveats/06-4f-01 |
|
|
|
rm -f intel-ucode-with-caveats/06-4f-01 |
|
|
|
rm -f intel-ucode-with-caveats/06-2d-07 |
|
|
|
rm -f intel-ucode-with-caveats/06-2d-07 |
|
|
|
|
|
|
|
rm -f intel-ucode-with-caveats/06-55-04 |
|
|
|
rmdir intel-ucode-with-caveats |
|
|
|
rmdir intel-ucode-with-caveats |
|
|
|
rm -rf intel-ucode |
|
|
|
rm -rf intel-ucode |
|
|
|
|
|
|
|
|
|
|
|
@ -250,15 +275,114 @@ exit 0 |
|
|
|
# dependency, it is pointless at best to regenerate the initramfs, |
|
|
|
# dependency, it is pointless at best to regenerate the initramfs, |
|
|
|
# and also does not work with rpm-ostree: |
|
|
|
# and also does not work with rpm-ostree: |
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1199582 |
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1199582 |
|
|
|
|
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1530400 |
|
|
|
|
|
|
|
[ -d /run/systemd/system ] || exit 0 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# We can't simply update all initramfs images, since "dracut --regenerate-all" |
|
|
|
|
|
|
|
# generates initramfs even for removed kernels and if dracut generates botched |
|
|
|
|
|
|
|
# initramfs image, that results in unbootable system, even with older kernels |
|
|
|
|
|
|
|
# that can't be used as a fallback: |
|
|
|
|
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1420180 |
|
|
|
|
|
|
|
# https://access.redhat.com/support/cases/#/case/01779274 |
|
|
|
|
|
|
|
# https://access.redhat.com/support/cases/#/case/01814106 |
|
|
|
|
|
|
|
# |
|
|
|
|
|
|
|
# ...and we can't simply limit ourselves to updating only the currently |
|
|
|
|
|
|
|
# running kernel, as this doesn't work well with cases where kernel |
|
|
|
|
|
|
|
# is installed before the updated microcode, or in the same transaction. |
|
|
|
|
|
|
|
# And we can't rely on late update either, due to issues like this: |
|
|
|
|
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1710445 |
|
|
|
|
|
|
|
# |
|
|
|
|
|
|
|
# ...and there are also issues with setups with increased "installonly_limit" |
|
|
|
|
|
|
|
# in /etc/yum.conf, which could lead to unacceptably long package installation |
|
|
|
|
|
|
|
# times. |
|
|
|
|
|
|
|
# |
|
|
|
|
|
|
|
# So, in the end, we try to grab no more than 2 most recently installed kernels |
|
|
|
|
|
|
|
# that are installed after the currently running one (with the currently running |
|
|
|
|
|
|
|
# kernel that makes up to 3 in total, the default "installonly_limit" value) |
|
|
|
|
|
|
|
# as a kernel package selection heuristic that tries to accomodate both the need |
|
|
|
|
|
|
|
# to put the latest microcode in freshly installed kernels and also addresses |
|
|
|
|
|
|
|
# existing concerns. |
|
|
|
# |
|
|
|
# |
|
|
|
# Also check that the running kernel is actually installed: |
|
|
|
# For RPM selection, kernel flavours (like "debug" or "kdump" or "zfcp", |
|
|
|
|
|
|
|
# with only the former being relevant to x86 architecture) are a part or RPM |
|
|
|
|
|
|
|
# name; it's also a part of uname, with different separator used in RHEL 6/7 |
|
|
|
|
|
|
|
# and RHEL 8. RT kernel, however, is special, as "rt" is another part |
|
|
|
|
|
|
|
# of RPM name and it has its own versioning scheme both in NVR and uname. |
|
|
|
|
|
|
|
# And there's the kernel package split in RHEL 8, so one should look for *-core |
|
|
|
|
|
|
|
# and not the main package. |
|
|
|
|
|
|
|
pkgs="kernel kernel-debug kernel-rt kernel-rt-debug" |
|
|
|
|
|
|
|
qf='%%{NAME} %%{VERSION}-%%{RELEASE}.%%{ARCH} %%{installtime}\n' |
|
|
|
|
|
|
|
: "${MICROCODE_RPM_KVER_LIMIT=2}" |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
rpm -qa --qf "${qf}" ${pkgs} | sort -r -n -k'3,3' | { |
|
|
|
|
|
|
|
kver_cnt=0 |
|
|
|
|
|
|
|
processed="" |
|
|
|
|
|
|
|
skipped="" |
|
|
|
|
|
|
|
skip=0 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
while read -r pkgname vra install_ts; do |
|
|
|
|
|
|
|
flavour='' |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# For x86, only "debug" flavour exists in RHEL 8 |
|
|
|
|
|
|
|
[ "x${pkgname%*-debug}" = "x${pkgname}" ] \ |
|
|
|
|
|
|
|
|| flavour='.debug' |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
kver_cnt="$((kver_cnt + 1))" |
|
|
|
|
|
|
|
kver_uname="${vra}${flavour}" |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Also check that the kernel is actually installed: |
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1591664 |
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1591664 |
|
|
|
# We use the presence of symvers file as an indicator, the check similar |
|
|
|
# We use the presence of symvers file as an indicator, the check |
|
|
|
# to what weak-modules script does. |
|
|
|
# similar to what weak-modules script does. |
|
|
|
if [ -d /run/systemd/system -a -e "/boot/symvers-$(uname -r).gz" ]; then |
|
|
|
# |
|
|
|
dracut -f |
|
|
|
# XXX: Not sure if this check is still needed, since we now |
|
|
|
|
|
|
|
# iterate over the rpm output. |
|
|
|
|
|
|
|
[ -e "/boot/symvers-${kver_uname}.gz" ] || continue |
|
|
|
|
|
|
|
# Check that modules.dep for the kernel is present as well, |
|
|
|
|
|
|
|
# otherwise dracut complains with "/lib/modules/.../modules.dep |
|
|
|
|
|
|
|
# is missing. Did you run depmod?". |
|
|
|
|
|
|
|
[ -e "/lib/modules/${kver_uname}/modules.dep" ] || continue |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# We update the kernels with the same uname as the running kernel |
|
|
|
|
|
|
|
# regardless of the selected limit |
|
|
|
|
|
|
|
if [ "x$(uname -r)" = "x${kver_uname}" \ |
|
|
|
|
|
|
|
-o \( "${kver_cnt}" -le "${MICROCODE_RPM_KVER_LIMIT}" \ |
|
|
|
|
|
|
|
-a "${skip}" = 0 \) ] |
|
|
|
|
|
|
|
then |
|
|
|
|
|
|
|
dracut -f --kver "${kver_uname}" |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
processed="${processed} ${pkgname}-${vra}" |
|
|
|
|
|
|
|
else |
|
|
|
|
|
|
|
skipped="${skipped} ${pkgname}-${vra}" |
|
|
|
|
|
|
|
fi |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# The packages are processed until a package with the same uname |
|
|
|
|
|
|
|
# as the running kernel is hit (since they are sorted |
|
|
|
|
|
|
|
# in the descending installation time stamp older). |
|
|
|
|
|
|
|
[ "x$(uname -r)" != "x${kver_uname}" ] || skip=1 |
|
|
|
|
|
|
|
done |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if [ -n "${skipped}" ]; then |
|
|
|
|
|
|
|
skip_msg="After installation of a new version of microcode_ctl package, |
|
|
|
|
|
|
|
initramfs hasn't been re-generated for all the installed kernel packages. |
|
|
|
|
|
|
|
The following kernel packages have been skipped:${skipped}. |
|
|
|
|
|
|
|
Please re-generate initramfs manually for these kernel packages with the |
|
|
|
|
|
|
|
\"dracut -f --kver KERNEL_VERSION\" command in order to get the latest |
|
|
|
|
|
|
|
Intel CPU microcode included into early initramfs image for it, if needed." |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if [ -e /usr/bin/logger ]; then |
|
|
|
|
|
|
|
echo "${skip_msg}" | |
|
|
|
|
|
|
|
/usr/bin/logger -p syslog.notice -t microcode_ctl |
|
|
|
fi |
|
|
|
fi |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if [ -e /dev/kmsg ]; then |
|
|
|
|
|
|
|
echo "${skip_msg}" > /dev/kmsg |
|
|
|
|
|
|
|
fi |
|
|
|
|
|
|
|
fi |
|
|
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
exit 0 |
|
|
|
|
|
|
|
|
|
|
|
%global rpm_state_dir %{_localstatedir}/lib/rpm-state |
|
|
|
%global rpm_state_dir %{_localstatedir}/lib/rpm-state |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@ -294,7 +418,7 @@ if [ -e "%{update_ucode}" ]; then |
|
|
|
|
|
|
|
|
|
|
|
%{update_ucode} --action remove --cleanup \ |
|
|
|
%{update_ucode} --action remove --cleanup \ |
|
|
|
"%{rpm_state_dir}/microcode_ctl_un_intel-ucode_diff" \ |
|
|
|
"%{rpm_state_dir}/microcode_ctl_un_intel-ucode_diff" \ |
|
|
|
"%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_diff" || exit 0 |
|
|
|
"%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_diff" || : |
|
|
|
|
|
|
|
|
|
|
|
rm -f "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_after" |
|
|
|
rm -f "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_after" |
|
|
|
rm -f "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_diff" |
|
|
|
rm -f "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_diff" |
|
|
|
@ -327,10 +451,10 @@ rm -f "%{rpm_state_dir}/microcode_ctl_un_file_list" |
|
|
|
|
|
|
|
|
|
|
|
exit 0 |
|
|
|
exit 0 |
|
|
|
|
|
|
|
|
|
|
|
%triggerin -- kernel |
|
|
|
%triggerin -- kernel, kernel-debug, kernel-rt, kernel-rt-debug |
|
|
|
%{update_ucode} |
|
|
|
%{update_ucode} |
|
|
|
|
|
|
|
|
|
|
|
%triggerpostun -- kernel |
|
|
|
%triggerpostun -- kernel, kernel-debug, kernel-rt, kernel-rt-debug |
|
|
|
%{update_ucode} |
|
|
|
%{update_ucode} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@ -350,10 +474,124 @@ rm -rf %{buildroot} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%changelog |
|
|
|
%changelog |
|
|
|
* Thu Nov 07 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53.3 |
|
|
|
* Thu Jun 04 2020 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.6 |
|
|
|
|
|
|
|
- Avoid temporary file creation, used for here-documents in check_caveats. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jun 04 2020 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.5 |
|
|
|
|
|
|
|
- Update Intel CPU microcode to microcode-20200602 release, addresses |
|
|
|
|
|
|
|
CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1827189): |
|
|
|
|
|
|
|
- Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f |
|
|
|
|
|
|
|
up to 0x621; |
|
|
|
|
|
|
|
- Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718 |
|
|
|
|
|
|
|
up to 0x71a; |
|
|
|
|
|
|
|
- Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28; |
|
|
|
|
|
|
|
- Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e |
|
|
|
|
|
|
|
up to 0x2f; |
|
|
|
|
|
|
|
- Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25 |
|
|
|
|
|
|
|
up to 0x26; |
|
|
|
|
|
|
|
- Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c; |
|
|
|
|
|
|
|
- Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21 |
|
|
|
|
|
|
|
up to 0x22; |
|
|
|
|
|
|
|
- Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6 |
|
|
|
|
|
|
|
up to 0xdc; |
|
|
|
|
|
|
|
- Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151 |
|
|
|
|
|
|
|
up to 0x1000157; |
|
|
|
|
|
|
|
- Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode |
|
|
|
|
|
|
|
(in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065 |
|
|
|
|
|
|
|
up to 0x2006906; |
|
|
|
|
|
|
|
- Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c |
|
|
|
|
|
|
|
up to 0x4002f01; |
|
|
|
|
|
|
|
- Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c |
|
|
|
|
|
|
|
up to 0x5002f01; |
|
|
|
|
|
|
|
- Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6 |
|
|
|
|
|
|
|
up to 0xdc; |
|
|
|
|
|
|
|
- Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46 |
|
|
|
|
|
|
|
up to 0x78; |
|
|
|
|
|
|
|
- Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca |
|
|
|
|
|
|
|
up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca |
|
|
|
|
|
|
|
up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca |
|
|
|
|
|
|
|
up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca |
|
|
|
|
|
|
|
up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode |
|
|
|
|
|
|
|
from revision 0xca up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision |
|
|
|
|
|
|
|
0xca up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca |
|
|
|
|
|
|
|
up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca |
|
|
|
|
|
|
|
up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6. |
|
|
|
|
|
|
|
- Change the URL in the intel-microcode2ucode.8 to point to the GitHub |
|
|
|
|
|
|
|
repository since the microcode download section at Intel Download Center |
|
|
|
|
|
|
|
does not exist anymore. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jun 04 2020 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.4 |
|
|
|
|
|
|
|
- Narrow down SKL-SP/W/X blacklist to exclude Server/FPGA/Fabric segment |
|
|
|
|
|
|
|
models. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jun 04 2020 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.3 |
|
|
|
|
|
|
|
- Re-generate initramfs not only for the currently running kernel, |
|
|
|
|
|
|
|
but for several recently installed kernels as well. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jun 04 2020 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.2 |
|
|
|
|
|
|
|
- Avoid find being SIGPIPE'd on early "grep -q" exit in the dracut script. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jun 04 2020 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.1 |
|
|
|
|
|
|
|
- Update stale posttrans dependency, add triggers for proper handling |
|
|
|
|
|
|
|
of the debug kernel flavour along with kernel-rt. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Nov 20 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61 |
|
|
|
|
|
|
|
- Do not update 06-55-04 (SKL-SP/W/X) to revision 0x2000065, use 0x2000064 |
|
|
|
|
|
|
|
by default (#1774329). |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Sat Nov 16 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-60 |
|
|
|
|
|
|
|
- Update Intel CPU microcode to microcode-20191115 release: |
|
|
|
|
|
|
|
- Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4 |
|
|
|
|
|
|
|
up to 0xd6; |
|
|
|
|
|
|
|
- Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca; |
|
|
|
|
|
|
|
- Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca; |
|
|
|
|
|
|
|
- Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca; |
|
|
|
|
|
|
|
- Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca; |
|
|
|
|
|
|
|
- Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision |
|
|
|
|
|
|
|
0xc6 up to 0xca; |
|
|
|
|
|
|
|
- Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6 |
|
|
|
|
|
|
|
up to 0xca; |
|
|
|
|
|
|
|
- Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca; |
|
|
|
|
|
|
|
- Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca; |
|
|
|
|
|
|
|
- Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca; |
|
|
|
|
|
|
|
- Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca; |
|
|
|
|
|
|
|
- Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Nov 15 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-59 |
|
|
|
|
|
|
|
- Update Intel CPU microcode to microcode-20191113 release: |
|
|
|
|
|
|
|
- Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6. |
|
|
|
|
|
|
|
- Drop 0001-releasenote-changes-summary-fixes.patch. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Nov 12 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-58 |
|
|
|
|
|
|
|
- Package the publicy available microcode-20191112 release (#1755025): |
|
|
|
|
|
|
|
- Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d; |
|
|
|
|
|
|
|
- Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c; |
|
|
|
|
|
|
|
- Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16; |
|
|
|
|
|
|
|
- Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150 |
|
|
|
|
|
|
|
up to 0x1000151; |
|
|
|
|
|
|
|
- Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision |
|
|
|
|
|
|
|
0x2000064 up to 0x2000065; |
|
|
|
|
|
|
|
- Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b |
|
|
|
|
|
|
|
up to 0x500002c; |
|
|
|
|
|
|
|
- Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32; |
|
|
|
|
|
|
|
- Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release. |
|
|
|
|
|
|
|
- Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch). |
|
|
|
|
|
|
|
- Update README.caveats with the link to the new Knowledge Base article. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Nov 07 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-57 |
|
|
|
- Intel CPU microcode update to 20191112, addresses CVE-2017-5715, |
|
|
|
- Intel CPU microcode update to 20191112, addresses CVE-2017-5715, |
|
|
|
CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949, |
|
|
|
CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1755025, #1764058, #1764071, |
|
|
|
#1764969, #1764997, #1765401, #1765413, #1766438, #1766870, #1769889): |
|
|
|
#1764950, #1764970, #1764998, #1765402, #1765414, #1766439, #1766871): |
|
|
|
- Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6; |
|
|
|
- Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6; |
|
|
|
- Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a; |
|
|
|
- Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a; |
|
|
|
- Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150; |
|
|
|
- Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150; |
|
|
|
@ -376,17 +614,19 @@ rm -rf %{buildroot} |
|
|
|
to 0xc6; |
|
|
|
to 0xc6; |
|
|
|
- Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6; |
|
|
|
- Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6; |
|
|
|
- Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6. |
|
|
|
- Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Oct 10 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-56 |
|
|
|
- Rework dracut hook to address dracut's early initramfs generation |
|
|
|
- Rework dracut hook to address dracut's early initramfs generation |
|
|
|
behaviour. |
|
|
|
behaviour (#1769413). |
|
|
|
|
|
|
|
|
|
|
|
* Sun Oct 06 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53.2 |
|
|
|
* Sun Oct 06 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-55 |
|
|
|
- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714 |
|
|
|
- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714 |
|
|
|
by default. |
|
|
|
by default. |
|
|
|
|
|
|
|
|
|
|
|
* Thu Sep 19 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53.1 |
|
|
|
* Thu Sep 19 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-54 |
|
|
|
- Intel CPU microcode update to 20190918. |
|
|
|
- Intel CPU microcode update to 20190918. |
|
|
|
- Add new disclaimer, generated based on relevant caveats. |
|
|
|
- Add new disclaimer, generated based on relevant caveats. |
|
|
|
- Resolves: #1758572. |
|
|
|
- Resolves: #1753541. |
|
|
|
|
|
|
|
|
|
|
|
* Wed Jun 19 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53 |
|
|
|
* Wed Jun 19 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53 |
|
|
|
- Intel CPU microcode update to 20190618. |
|
|
|
- Intel CPU microcode update to 20190618. |
|
|
|
|
basebuilder_pel7x64builder0
4 years ago