Blame SPECS/microcode_ctl.spec

1abd92
%define upstream_version 2.1-18
1abd92
%define intel_ucode_version 20190918
1abd92
%define intel_ucode_file_id 28727
1abd92
1abd92
%define caveat_dir %{_datarootdir}/microcode_ctl/ucode_with_caveats
1abd92
%define microcode_ctl_libexec %{_libexecdir}/microcode_ctl
1abd92
1abd92
%define update_ucode %{microcode_ctl_libexec}/update_ucode
1abd92
%define check_caveats %{microcode_ctl_libexec}/check_caveats
1abd92
%define reload_microcode %{microcode_ctl_libexec}/reload_microcode
1abd92
1abd92
%define dracutlibdir %{_prefix}/lib/dracut
1abd92
1abd92
%define i_m2u_man intel-microcode2ucode.8
1abd92
1abd92
# In microcode_ctl, documentation directory is unversioned historically.
1abd92
# In RHEL 8 spec, %{_pkgdocdir} is used as installation destination; however,
1abd92
# it is unversioned only since Fedora 20, per #986871,
1abd92
# and not in Fedora 18/19-based RHEL 7.
1abd92
%define _pkgdocdir %{_docdir}/%{name}
1abd92
1abd92
Summary:        Tool to transform and deploy CPU microcode update for x86.
1abd92
Name:           microcode_ctl
1abd92
Version:        2.1
1abd92
Release:        55%{?dist}
1abd92
Epoch:          2
1abd92
Group:          System Environment/Base
1abd92
License:        GPLv2+ and Redistributable, no modification permitted
1abd92
URL:            https://pagure.io/microcode_ctl
1abd92
Source0:        https://releases.pagure.org/microcode_ctl/%{name}-%{upstream_version}.tar.xz
1abd92
Source1:        https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/archive/microcode-%{intel_ucode_version}.tar.gz
1abd92
# (Pre-MDS) revision 0x714 of 06-2d-07 microcode
1abd92
Source2:        https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/raw/microcode-20190514/intel-ucode/06-2d-07
1abd92
1abd92
1abd92
# systemd unit
1abd92
Source10:       microcode.service
1abd92
1abd92
# dracut-related stuff
1abd92
Source20:       01-microcode.conf
1abd92
Source21:       99-microcode-override.conf
1abd92
Source22:       dracut_99microcode_ctl-fw_dir_override_module_init.sh
1abd92
1abd92
# libexec
1abd92
Source30:       update_ucode
1abd92
Source31:       check_caveats
1abd92
Source32:       reload_microcode
1abd92
1abd92
# docs
1abd92
Source40:       %{i_m2u_man}.in
1abd92
Source41:       README.caveats
1abd92
1abd92
## Caveats
1abd92
# BDW EP/EX
1abd92
# https://bugzilla.redhat.com/show_bug.cgi?id=1622180
1abd92
# https://bugzilla.redhat.com/show_bug.cgi?id=1623630
1abd92
# https://bugzilla.redhat.com/show_bug.cgi?id=1646383
1abd92
Source100:      06-4f-01_readme
1abd92
Source101:      06-4f-01_config
1abd92
Source102:      06-4f-01_disclaimer
1abd92
1abd92
# Unsafe early MC update inside VM:
1abd92
# https://bugzilla.redhat.com/show_bug.cgi?id=1596627
1abd92
Source110:      intel_readme
1abd92
Source111:      intel_config
1abd92
Source112:      intel_disclaimer
1abd92
1abd92
# SNB-EP (CPUID 0x206d7) post-MDS hangs
1abd92
# https://bugzilla.redhat.com/show_bug.cgi?id=1758382
1abd92
# https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/15
1abd92
Source120:      06-2d-07_readme
1abd92
Source121:      06-2d-07_config
1abd92
Source122:      06-2d-07_disclaimer
1abd92
1abd92
1abd92
# "Provides:" RPM tags generator
1abd92
Source200:      gen_provides.sh
1abd92
1abd92
Patch1:         microcode_ctl-do-not-merge-ucode-with-caveats.patch
1abd92
Patch2:         microcode_ctl-revert-intel-microcode2ucode-removal.patch
1abd92
Patch3:         microcode_ctl-use-microcode-%{intel_ucode_version}-tgz.patch
1abd92
Patch4:         microcode_ctl-do-not-install-intel-ucode.patch
1abd92
Patch5:         microcode_ctl-intel-microcode2ucode-buf-handling.patch
1abd92
Patch6:         microcode_ctl-ignore-first-directory-level-in-archive.patch
1abd92
1abd92
Buildroot:      %{_tmppath}/%{name}-%{version}-root
1abd92
ExclusiveArch:  %{ix86} x86_64
1abd92
BuildRequires:  systemd-units
1abd92
Requires(post): systemd
1abd92
Requires(preun): systemd
1abd92
Requires(postun): systemd
1abd92
Requires(posttrans): kernel
1abd92
1abd92
%global _use_internal_dependency_generator 0
1abd92
%define __find_provides "%{SOURCE200}"
1abd92
1abd92
%description
1abd92
The microcode_ctl utility is a companion to the microcode driver written
1abd92
by Tigran Aivazian <tigran@aivazian.fsnet.co.uk>.
1abd92
1abd92
The microcode update is volatile and needs to be uploaded on each system
1abd92
boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts
1abd92
back to the old microcode.
1abd92
1abd92
%prep
1abd92
%setup -q -n %{name}-%{upstream_version}
1abd92
%patch1 -p1
1abd92
%patch2 -p1
1abd92
1abd92
# Use the latest archive instead of microcode-20180703.tgz bundled
1abd92
# with upstream microcode_ctl-2.1-18.
1abd92
cp "%{SOURCE1}" .
1abd92
%patch3 -p1
1abd92
1abd92
# We install ucode files manually into "intel" caveat directory
1abd92
%patch4 -p1
1abd92
1abd92
%patch5 -p1
1abd92
1abd92
# The archive published on github has an additional top-level directory,
1abd92
# strip it.
1abd92
%patch6 -p1
1abd92
1abd92
%build
1abd92
make CFLAGS="$RPM_OPT_FLAGS" %{?_smp_mflags}
1abd92
1abd92
# We do not populate any intel-ucode files into /lib/firmware directly due to
1abd92
# early microcode load inside VM issue:
1abd92
#   https://bugzilla.redhat.com/show_bug.cgi?id=1596627
1abd92
#   https://bugzilla.redhat.com/show_bug.cgi?id=1607899
1abd92
#find intel-ucode -type f | sed 's/^/%%ghost \/lib\/firmware\//' > ghost_list
1abd92
touch ghost_list
1abd92
1abd92
tar xf "%{SOURCE1}" --wildcards --strip-components=1 \
1abd92
	\*/intel-ucode-with-caveats \*/license \*/releasenote
1abd92
1abd92
# replacing SNB-EP (CPUID 0x206d7) microcode with pre-MDS version
1abd92
mv intel-ucode/06-2d-07 intel-ucode-with-caveats/
1abd92
cp "%{SOURCE2}" intel-ucode/
1abd92
1abd92
# man page
1abd92
sed "%{SOURCE40}" \
1abd92
	-e "s/@DATE@/2019-05-09/g" \
1abd92
	-e "s/@VERSION@/%{version}-%{release}/g" \
1abd92
	-e "s|@MICROCODE_URL@|https://downloadcenter.intel.com/download/%{intel_ucode_file_id}|g" > "%{i_m2u_man}"
1abd92
1abd92
%install
1abd92
rm -rf %{buildroot}
1abd92
make DESTDIR=%{buildroot} PREFIX=%{_prefix} INSDIR=/usr/sbin MICDIR=/usr/share/microcode_ctl install clean
1abd92
1abd92
install -m 755 -d \
1abd92
	"%{buildroot}/%{_datarootdir}/microcode_ctl/intel-ucode" \
1abd92
	"%{buildroot}/%{caveat_dir}/" \
1abd92
	"%{buildroot}/etc/microcode_ctl/ucode_with_caveats/"
1abd92
1abd92
# systemd unit
1abd92
install -m 755 -d "%{buildroot}/%{_unitdir}"
1abd92
install -m 644 "%{SOURCE10}" -t "%{buildroot}/%{_unitdir}/"
1abd92
1abd92
# dracut
1abd92
%define dracut_mod_dir "%{buildroot}/%{dracutlibdir}/modules.d/99microcode_ctl-fw_dir_override"
1abd92
install -m 755 -d \
1abd92
	"%{dracut_mod_dir}" \
1abd92
	"%{buildroot}/%{dracutlibdir}/dracut.conf.d/"
1abd92
install -m 644 "%{SOURCE20}" "%{SOURCE21}" \
1abd92
	-t "%{buildroot}/%{dracutlibdir}/dracut.conf.d/"
1abd92
install -m 755 "%{SOURCE22}" "%{dracut_mod_dir}/module-setup.sh"
1abd92
1abd92
# Internal helper scripts
1abd92
install -m 755 -d "%{buildroot}/%{microcode_ctl_libexec}"
1abd92
install "%{SOURCE30}" "%{SOURCE31}" "%{SOURCE32}" \
1abd92
	-m 755 -t "%{buildroot}/%{microcode_ctl_libexec}"
1abd92
1abd92
1abd92
## Documentation
1abd92
install -m 755 -d "%{buildroot}/%{_pkgdocdir}/caveats"
1abd92
1abd92
# caveats readme
1abd92
install "%{SOURCE41}" \
1abd92
	-m 644 -t "%{buildroot}/%{_pkgdocdir}/"
1abd92
1abd92
# Provide Intel microcode license, as it requires so
1abd92
install -m 644 license \
1abd92
	"%{buildroot}/%{_pkgdocdir}/LICENSE.intel-ucode"
1abd92
1abd92
# Provide release notes for Intel microcode
1abd92
install -m 644 releasenote \
1abd92
	"%{buildroot}/%{_pkgdocdir}/RELEASE_NOTES.intel-ucode"
1abd92
1abd92
# caveats
1abd92
install -m 644 "%{SOURCE100}" "%{SOURCE110}" "%{SOURCE120}" \
1abd92
	-t "%{buildroot}/%{_pkgdocdir}/caveats/"
1abd92
1abd92
# Man page
1abd92
install -m 755 -d %{buildroot}/%{_mandir}/man8/
1abd92
install -m 644 "%{i_m2u_man}" -t %{buildroot}/%{_mandir}/man8/
1abd92
1abd92
1abd92
## Caveat data
1abd92
1abd92
# BDW caveat
1abd92
%define bdw_inst_dir %{buildroot}/%{caveat_dir}/intel-06-4f-01/
1abd92
install -m 755 -d "%{bdw_inst_dir}/intel-ucode"
1abd92
install -m 644 intel-ucode-with-caveats/06-4f-01 -t "%{bdw_inst_dir}/intel-ucode/"
1abd92
install -m 644 "%{SOURCE100}" "%{bdw_inst_dir}/readme"
1abd92
install -m 644 "%{SOURCE101}" "%{bdw_inst_dir}/config"
1abd92
install -m 644 "%{SOURCE102}" "%{bdw_inst_dir}/disclaimer"
1abd92
1abd92
# Early update caveat
1abd92
%define intel_inst_dir %{buildroot}/%{caveat_dir}/intel/
1abd92
install -m 755 -d "%{intel_inst_dir}/intel-ucode"
1abd92
install -m 644 intel-ucode/* -t "%{intel_inst_dir}/intel-ucode/"
1abd92
install -m 644 "%{SOURCE110}" "%{intel_inst_dir}/readme"
1abd92
install -m 644 "%{SOURCE111}" "%{intel_inst_dir}/config"
1abd92
install -m 644 "%{SOURCE112}" "%{intel_inst_dir}/disclaimer"
1abd92
1abd92
# SNB caveat
1abd92
%define snb_inst_dir %{buildroot}/%{caveat_dir}/intel-06-2d-07/
1abd92
install -m 755 -d "%{snb_inst_dir}/intel-ucode"
1abd92
install -m 644 intel-ucode-with-caveats/06-2d-07 -t "%{snb_inst_dir}/intel-ucode/"
1abd92
install -m 644 "%{SOURCE120}" "%{snb_inst_dir}/readme"
1abd92
install -m 644 "%{SOURCE121}" "%{snb_inst_dir}/config"
1abd92
install -m 644 "%{SOURCE122}" "%{snb_inst_dir}/disclaimer"
1abd92
1abd92
# Cleanup
1abd92
rm -f intel-ucode-with-caveats/06-4f-01
1abd92
rm -f intel-ucode-with-caveats/06-2d-07
1abd92
rmdir intel-ucode-with-caveats
1abd92
rm -rf intel-ucode
1abd92
1abd92
%post
1abd92
%systemd_post microcode.service
1abd92
%{update_ucode}
1abd92
%{reload_microcode}
1abd92
1abd92
# send the message to syslog, so it gets recorded on /var/log
1abd92
if [ -e /usr/bin/logger ]; then
1abd92
	%{check_caveats} -m -d | /usr/bin/logger -p syslog.notice -t DISCLAIMER
1abd92
fi
1abd92
# also paste it over dmesg (some customers drop dmesg messages while
1abd92
# others keep them into /var/log for the later case, we'll have the
1abd92
# disclaimer recorded twice into system logs.
1abd92
%{check_caveats} -m -d > /dev/kmsg
1abd92
1abd92
exit 0
1abd92
1abd92
%posttrans
1abd92
# We only want to regenerate the initramfs for a fully booted
1abd92
# system; if this package happened to e.g. be pulled in as a build
1abd92
# dependency, it is pointless at best to regenerate the initramfs,
1abd92
# and also does not work with rpm-ostree:
1abd92
# https://bugzilla.redhat.com/show_bug.cgi?id=1199582
1abd92
#
1abd92
# Also check that the running kernel is actually installed:
1abd92
# https://bugzilla.redhat.com/show_bug.cgi?id=1591664
1abd92
# We use the presence of symvers file as an indicator, the check similar
1abd92
# to what weak-modules script does.
1abd92
if [ -d /run/systemd/system -a -e "/boot/symvers-$(uname -r).gz" ]; then
1abd92
	dracut -f
1abd92
fi
1abd92
1abd92
%global rpm_state_dir %{_localstatedir}/lib/rpm-state
1abd92
1abd92
1abd92
%preun
1abd92
%systemd_preun microcode.service
1abd92
1abd92
# Storing ucode list before uninstall
1abd92
ls /usr/share/microcode_ctl/intel-ucode |
1abd92
	sort > "%{rpm_state_dir}/microcode_ctl_un_intel-ucode"
1abd92
ls /usr/share/microcode_ctl/ucode_with_caveats |
1abd92
	sort > "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats"
1abd92
%{update_ucode} --action list --skip-common |
1abd92
	sort > "%{rpm_state_dir}/microcode_ctl_un_file_list"
1abd92
1abd92
%postun
1abd92
%systemd_postun microcode.service
1abd92
1abd92
ls /usr/share/microcode_ctl/intel-ucode 2> /dev/null |
1abd92
	sort > "%{rpm_state_dir}/microcode_ctl_un_intel-ucode_after"
1abd92
comm -23 \
1abd92
	"%{rpm_state_dir}/microcode_ctl_un_intel-ucode" \
1abd92
	"%{rpm_state_dir}/microcode_ctl_un_intel-ucode_after" \
1abd92
	> "%{rpm_state_dir}/microcode_ctl_un_intel-ucode_diff"
1abd92
1abd92
if [ -e "%{update_ucode}" ]; then
1abd92
	ls /usr/share/microcode_ctl/ucode_with_caveats 2> /dev/null |
1abd92
		sort > "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_after"
1abd92
1abd92
	comm -23 \
1abd92
		"%{rpm_state_dir}/microcode_ctl_un_ucode_caveats" \
1abd92
		"%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_after" \
1abd92
		> "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_diff"
1abd92
1abd92
	%{update_ucode} --action remove --cleanup \
1abd92
		"%{rpm_state_dir}/microcode_ctl_un_intel-ucode_diff" \
1abd92
		"%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_diff" || exit 0
1abd92
1abd92
	rm -f "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_after"
1abd92
	rm -f "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_diff"
1abd92
else
1abd92
	while read -r f; do
1abd92
		[ -L "/lib/firmware/intel-ucode/$f" ] || continue
1abd92
		rm -f "/lib/firmware/intel-ucode/$f"
1abd92
	done < "%{rpm_state_dir}/microcode_ctl_un_intel-ucode_diff"
1abd92
1abd92
	rmdir "/lib/firmware/intel-ucode" 2>/dev/null || :
1abd92
1abd92
	# We presume that if we don't have update_ucode script, we can remove
1abd92
	# all the caveats-related files.
1abd92
	while read -r f; do
1abd92
		if [ -L "$f" ] || [ "${f%%readme-*}" != "$f" ]; then
1abd92
			rm -f "$f"
1abd92
			rmdir -p $(dirname "$f") 2>/dev/null || :
1abd92
		fi
1abd92
	done < "%{rpm_state_dir}/microcode_ctl_un_file_list"
1abd92
fi
1abd92
1abd92
rm -f "%{rpm_state_dir}/microcode_ctl_un_intel-ucode"
1abd92
rm -f "%{rpm_state_dir}/microcode_ctl_un_intel-ucode_after"
1abd92
rm -f "%{rpm_state_dir}/microcode_ctl_un_intel-ucode_diff"
1abd92
1abd92
rm -f "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats"
1abd92
1abd92
rm -f "%{rpm_state_dir}/microcode_ctl_un_file_list"
1abd92
1abd92
1abd92
exit 0
1abd92
1abd92
%triggerin -- kernel
1abd92
%{update_ucode}
1abd92
1abd92
%triggerpostun -- kernel
1abd92
%{update_ucode}
1abd92
1abd92
1abd92
%clean
1abd92
rm -rf %{buildroot}
1abd92
1abd92
%files -f ghost_list
1abd92
%ghost %attr(0755, root, root) /lib/firmware/intel-ucode/
1abd92
/usr/sbin/intel-microcode2ucode
1abd92
%{microcode_ctl_libexec}
1abd92
/usr/share/microcode_ctl
1abd92
%{dracutlibdir}/modules.d/*
1abd92
%config(noreplace) %{dracutlibdir}/dracut.conf.d/*
1abd92
%{_unitdir}/microcode.service
1abd92
%doc %{_pkgdocdir}
1abd92
%{_mandir}/man8/*
1abd92
1abd92
1abd92
%changelog
1abd92
* Sun Oct 06 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-55
1abd92
- Do not update 06-2d-07 (SNB-E/EN/EP) to revision 0x718, use 0x714
1abd92
  by default.
1abd92
1abd92
* Thu Sep 19 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-54
1abd92
- Intel CPU microcode update to 20190918.
1abd92
- Add new disclaimer, generated based on relevant caveats.
1abd92
- Resolves: #1753541.
1abd92
1abd92
* Wed Jun 19 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53
1abd92
- Intel CPU microcode update to 20190618.
1abd92
- Resolves: #1717241.
1abd92
1abd92
* Sun Jun 02 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-52
1abd92
- Remove disclaimer, as it is not as important now to justify kmsg/log
1abd92
  pollution; its contents are partially adopted in README.caveats.
1abd92
1abd92
* Mon May 20 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-51
1abd92
- Intel CPU microcode update to 20190514a.
1abd92
- Resolves: #1711941.
1abd92
1abd92
* Thu May 09 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-50
1abd92
- Intel CPU microcode update to 20190507_Public_DEMO.
1abd92
- Resolves: #1697904.
1abd92
1abd92
* Mon Apr 15 2019 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-49
1abd92
- Intel CPU microcode update to 20190312.
1abd92
- Add "Provides:" tags generation.
1abd92
- Resolves: #1697904.
1abd92
1abd92
* Thu Sep 20 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-48
1abd92
- Fix %postun script (#1628629)
1abd92
1abd92
* Wed Sep 05 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-47
1abd92
- Add 7.3.z kernel version to kernel_early configuration.
1abd92
1abd92
* Thu Aug 30 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-46
1abd92
- Fix dracut module checks in Host-Only mode.
1abd92
1abd92
* Thu Aug 30 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-45
1abd92
- Disable 06-4f-01 microcode in config (#1623630).
1abd92
1abd92
* Tue Aug 28 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-44
1abd92
- Intel CPU microcode update to 20180807a.
1abd92
- Add README.caveats documentation file.
1abd92
- Add intel-microcode2ucode manual page.
1abd92
- Add check for early microcode load, use it in microcode_ctl dracut module.
1abd92
- Resolves: #1596627.
1abd92
1abd92
* Mon Aug 20 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-43
1abd92
- Check that the currently running kernel is installed before
1abd92
  running dracut -f.
1abd92
1abd92
* Thu Aug 16 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-42
1abd92
- Drop "hypervisor" /proc/cpuinfo flag check.
1abd92
1abd92
* Thu Aug 09 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-41
1abd92
- Intel CPU microcode update to 20180807.
1abd92
- Resolves: #1614422
1abd92
1abd92
* Mon Aug 06 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-40
1abd92
- Add an ability to disable "hypervisor" /proc/cpuinfo flag check.
1abd92
1abd92
* Fri Jul 27 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-39
1abd92
- Provide %attr for the ghosted /lib/firmware/intel-ucode.
1abd92
1abd92
* Thu Jul 26 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-38
1abd92
- Remove model name blacklists from caveats configuration files.
1abd92
- Resolves: #1596627
1abd92
1abd92
* Wed Jul 25 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-37
1abd92
- Add model name blacklist infrastructure.
1abd92
- Store Intel ucode files in /usr/share/microcode_ctl; do not populate them
1abd92
  in a virtualised environment.
1abd92
- Resolves: #1596627
1abd92
1abd92
* Fri Jul 20 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-35
1abd92
- Add intel-microcode2ucode back
1abd92
- Resolves: #1574582
1abd92
1abd92
* Fri Jul 20 2018 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-34
1abd92
- Update to upstream 2.1-18. Intel CPU microcode update to 20180703.
1abd92
- Add infrastructure for handling kernel-version-dependant microcode.
1abd92
- Resolves: #1574582
1abd92
1abd92
* Wed Jun 13 2018 Petr Oros <poros@redhat.com> - 2.1-33
1abd92
- CVE-2018-3639 hw: cpu: speculative store bypass
1abd92
- Resolves: #1495071
1abd92
1abd92
* Mon Jun 11 2018 Petr Oros <poros@redhat.com> - 2.1-32
1abd92
- Fix: Operation not permitted when installing microcode_ctl
1abd92
- Resolves: #1584247
1abd92
1abd92
* Tue May 15 2018 Petr Oros <poros@redhat.com> - 2.1-31
1abd92
- Update disclaimer text
1abd92
- Resolves: #1574574
1abd92
1abd92
* Mon May 7 2018 Petr Oros <poros@redhat.com> - 2.1-30
1abd92
- Intel CPU microcode update to 20180425.
1abd92
- Resolves: #1574574
1abd92
1abd92
* Fri Jan 12 2018 Petr Oros <poros@redhat.com> - 2.1-29
1abd92
- Revert Microcode from Intel for Side Channel attack
1abd92
- Resolves: #1533939
1abd92
1abd92
* Fri Jan 12 2018 Petr Oros <poros@redhat.com> - 2.1-29
1abd92
- Don't run dracut if not on a live system
1abd92
- Resolves: #1530400
1abd92
1abd92
* Tue Jan 9 2018 Petr Oros <poros@redhat.com> - 2.1-28
1abd92
- Remove old binary tool
1abd92
- Resolves: #1527360
1abd92
1abd92
* Tue Jan 9 2018 Petr Oros <poros@redhat.com> - 2.1-27
1abd92
- Update to upstream 2.1-15. Intel CPU microcode update to 20180108.
1abd92
- Resolves: #1527360
1abd92
1abd92
* Fri Dec 15 2017 Petr Oros <poros@redhat.com> - 2.1-26
1abd92
- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
1abd92
- Resolves: #1527360
1abd92
1abd92
* Wed Nov 22 2017 Petr Oros <poros@redhat.com> - 2.1-25
1abd92
- Update to upstream 2.1-14. Intel CPU microcode update to 20171117.
1abd92
- Resolves: #1457522
1abd92
1abd92
* Tue Oct 17 2017 Petr Oros <poros@redhat.com> - 2.1-24
1abd92
- Fix upstream URL
1abd92
- Resolves: #1502360
1abd92
1abd92
* Fri Jul 14 2017 Petr Oros <poros@redhat.com> - 2.1-23
1abd92
- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
1abd92
- Resolves: #1457522
1abd92
1abd92
* Wed May 24 2017 Petr Oros <poros@redhat.com> - 2.1-22
1abd92
- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
1abd92
- Resolves: #1384218
1abd92
1abd92
* Tue Mar 7 2017 Petr Oros <poros@redhat.com> - 2.1-21
1abd92
- Rpm scriptlets should only rebuild the current kernel's initrd.
1abd92
- Resolves: #1420180
1abd92
1abd92
* Wed Jan 18 2017 Petr Oros <poros@redhat.com> - 2.1-20
1abd92
- Fix issue with hot microcode cpu reload.
1abd92
- Resolves: #1411232
1abd92
1abd92
* Mon Jan 9 2017 Petr Oros <poros@redhat.com> - 2.1-19
1abd92
- Fix broken quoting in ExecStart line.
1abd92
- Resolves: #1411232
1abd92
1abd92
* Fri Dec 16 2016 Petr Oros <poros@redhat.com> - 2.1-18
1abd92
- Fix issue with hot microcode cpu reload.
1abd92
- Resolves: #1398698
1abd92
1abd92
* Wed Nov 30 2016 Petr Oros <poros@redhat.com> - 2.1-17
1abd92
- Move dracut call into posttrans phase.
1abd92
- Resolves: #1398698
1abd92
1abd92
* Thu Jul 21 2016 Petr Oros <poros@redhat.com> - 2.1-16
1abd92
- Update to upstream 2.1-10. Intel CPU microcode update to 20160714.
1abd92
- Resolves: #1358047
1abd92
1abd92
* Wed Jun 29 2016 Petr Oros <poros@redhat.com> - 2.1-15
1abd92
- Load CPU microcode update only on supproted systems.
1abd92
- Resolves: #1307179
1abd92
1abd92
* Fri Jun 24 2016 Petr Oros <poros@redhat.com> - 2.1-14
1abd92
- Update to upstream 2.1-9. Intel CPU microcode update to 20160607.
1abd92
- Resolves: #1253106
1abd92
1abd92
* Thu May 19 2016 Petr Oros <poros@redhat.com> - 2.1-13
1abd92
- Run dracut -f for all kernels.
1abd92
- Resolves: #1292158
1abd92
1abd92
* Fri Jul 3 2015 Petr Oros <poros@redhat.com> - 2.1-12
1abd92
- Update to upstream 2.1-7. Intel CPU microcode update to 20150121.
1abd92
- Resolves: #1174983
1abd92
1abd92
* Fri Oct 10 2014 Petr Oros <poros@redhat.com> - 2.1-11
1abd92
- Run dracut -f after install microcode for update initramfs.
1abd92
- Resolves: #1151192
1abd92
1abd92
* Tue Sep 30 2014 Petr Oros <poros@redhat.com> - 2.1-10
1abd92
- Update to upstream 2.1-6. Intel CPU microcode update to 20140913.
1abd92
- Resolves: #1142302
1abd92
1abd92
* Tue Jul 15 2014 Petr Oros <poros@redhat.com> - 2.1-9
1abd92
- Update to upstream 2.1-5. Intel CPU microcode update to 20140624.
1abd92
- Resolves: #1113396
1abd92
1abd92
* Tue Jun 3 2014 Petr Oros <poros@redhat.com> - 2.1-8
1abd92
- Fix bogus time in changelog
1abd92
- Resolves: #1085117
1abd92
1abd92
* Tue Jun 3 2014 Petr Oros <poros@redhat.com> - 2.1-8
1abd92
- Update to upstream 2.1-4. Intel CPU microcode update to 20140430.
1abd92
- Resolves: #1085117
1abd92
1abd92
* Wed Mar 12 2014 Anton Arapov <anton@redhat.com> - 2.1-7.1
1abd92
- Fix the microcode's behaviour in virtual environment.
1abd92
1abd92
* Fri Feb 28 2014 Anton Arapov <anton@redhat.com> - 2.1-7
1abd92
- Fix the microcode's dracut configuration file location. 
1abd92
1abd92
* Tue Feb 18 2014 Anton Arapov <anton@redhat.com> - 2.1-6
1abd92
- Enable early microcode capabilities. Systemd and Dracut support. (Jeff Bastian)
1abd92
1abd92
* Fri Jan 24 2014 Anton Arapov <anton@redhat.com> - 2.1-5
1abd92
- Update to upstream 2.1-3. Intel CPU microcode update to 20140122.
1abd92
1abd92
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 2:2.1-4
1abd92
- Mass rebuild 2013-12-27
1abd92
1abd92
* Mon Sep 09 2013 Anton Arapov <anton@redhat.com> 2.1-3
1abd92
- Imported to RHEL tree
1abd92
1abd92
* Mon Sep 09 2013 Anton Arapov <anton@redhat.com> 2.1-2
1abd92
- Update to upstream 2.1-2.
1abd92
1abd92
* Wed Aug 14 2013 Anton Arapov <anton@redhat.com> 2.1-1
1abd92
- Update to upstream 2.1-1.
1abd92
1abd92
* Sat Jul 27 2013 Anton Arapov <anton@redhat.com> 2.1-0
1abd92
- Update to upstream 2.1. AMD microcode has been removed, find it in linux-firmware.
1abd92
1abd92
* Wed Apr 03 2013 Anton Arapov <anton@redhat.com> 2.0-3.1
1abd92
- Update to upstream 2.0-3
1abd92
1abd92
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:2.0-3
1abd92
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
1abd92
1abd92
* Wed Oct 17 2012 Anton Arapov <anton@redhat.com> 2.0-2
1abd92
- Update to upstream 2.0-2
1abd92
1abd92
* Tue Oct 02 2012 Anton Arapov <anton@redhat.com> 2.0-1
1abd92
- Update to upstream 2.0-1
1abd92
1abd92
* Mon Aug 06 2012 Anton Arapov <anton@redhat.com> 2.0
1abd92
- Update to upstream 2.0
1abd92
1abd92
* Wed Jul 25 2012 Anton Arapov <anton@redhat.com> 1.18-1
1abd92
- Update to upstream 1.18
1abd92
1abd92
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.17-26
1abd92
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
1abd92
1abd92
* Thu Jun 07 2012 Anton Arapov <anton@redhat.com> 1.17-25
1abd92
- Update to microcode-20120606.dat
1abd92
1abd92
* Tue Feb 07 2012 Anton Arapov <anton@redhat.com> 1.17-24
1abd92
- Update to amd-ucode-2012-01-17.tar
1abd92
1abd92
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.17-22
1abd92
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
1abd92
1abd92
* Thu Dec 22 2011 Anton Arapov <anton@redhat.com> 1.17-21
1abd92
- Fix a segfault that may be triggered by very long parameter [#768803]
1abd92
1abd92
* Tue Dec 13 2011 Anton Arapov <anton@redhat.com> 1.17-20
1abd92
- Update to microcode-20111110.dat
1abd92
1abd92
* Tue Sep 27 2011 Anton Arapov <anton@redhat.com> 1.17-19
1abd92
- Update to microcode-20110915.dat
1abd92
1abd92
* Thu Aug 04 2011 Anton Arapov <anton@redhat.com> 1.17-18
1abd92
- Ship splitted microcode for Intel CPUs [#690930]
1abd92
- Include tool for splitting microcode for Intl CPUs (Kay Sievers )
1abd92
1abd92
* Thu Jun 30 2011 Anton Arapov <anton@redhat.com> 1.17-17
1abd92
- Fix udev rules (Dave Jones ) [#690930]
1abd92
1abd92
* Thu May 12 2011 Anton Arapov <anton@redhat.com> 1.17-14
1abd92
- Update to microcode-20110428.dat
1abd92
1abd92
* Thu Mar 24 2011 Anton Arapov <anton@redhat.com> 1.17-13
1abd92
- fix memory leak.
1abd92
1abd92
* Mon Mar 07 2011 Anton Arapov <anton@redhat.com> 1.17-12
1abd92
- Update to amd-ucode-2011-01-11.tar
1abd92
1abd92
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.17-11
1abd92
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
1abd92
1abd92
* Wed Jan 19 2011 Anton Arapov <anton@redhat.com> 1.17-10
1abd92
- manpage fix (John Bradshaw ) [#670879]
1abd92
1abd92
* Wed Jan 05 2011 Anton Arapov <anton@redhat.com> 1.17-9
1abd92
- Update to microcode-20101123.dat
1abd92
1abd92
* Mon Nov 01 2010 Anton Arapov <anton@redhat.com> 1.17-8
1abd92
- Update to microcode-20100914.dat
1abd92
1abd92
* Wed Sep 29 2010 jkeating - 1:1.17-7
1abd92
- Rebuilt for gcc bug 634757
1abd92
1abd92
* Wed Sep 15 2010 Anton Arapov <anton@redhat.com> 1.17-6
1abd92
- Update to microcode-20100826.dat
1abd92
1abd92
* Tue Sep 07 2010 Toshio Kuratomi <toshio@fedoraproject.org> 1.17-5
1abd92
- Fix license tag: bz#450491
1abd92
1abd92
* Fri Aug 27 2010 Dave Jones <davej@redhat.com> 1.17-4
1abd92
- Update to microcode-20100826.dat
1abd92
1abd92
* Tue Mar 23 2010 Anton Arapov <anton@redhat.com> 1.17-3
1abd92
- Fix the udev rules (Harald Hoyer )
1abd92
1abd92
* Mon Mar 22 2010 Anton Arapov <anton@redhat.com> 1.17-2
1abd92
- Make microcode_ctl event driven (Bill Nottingham ) [#479898]
1abd92
1abd92
* Thu Feb 11 2010 Dave Jones <davej@redhat.com> 1.17-1.58
1abd92
- Update to microcode-20100209.dat
1abd92
1abd92
* Fri Dec 04 2009 Kyle McMartin <kyle@redhat.com> 1.17-1.57
1abd92
- Fix duplicate message pointed out by Edward Sheldrake.
1abd92
1abd92
* Wed Dec 02 2009 Kyle McMartin <kyle@redhat.com> 1.17-1.56
1abd92
- Add AMD x86/x86-64 microcode. (Dated: 2009-10-09)
1abd92
  Doesn't need microcode_ctl modifications as it's loaded by
1abd92
  request_firmware() like any other sensible driver.
1abd92
- Eventually, this AMD firmware can probably live inside
1abd92
  kernel-firmware once it is split out.
1abd92
1abd92
* Wed Sep 30 2009 Dave Jones <davej@redhat.com>
1abd92
- Update to microcode-20090927.dat
1abd92
1abd92
* Fri Sep 11 2009 Dave Jones <davej@redhat.com>
1abd92
- Remove some unnecessary code from the init script.
1abd92
1abd92
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.17-1.52.1
1abd92
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
1abd92
1abd92
* Thu Jun 25 2009 Dave Jones <davej@redhat.com>
1abd92
- Shorten sleep time during init.
1abd92
  This really needs to be replaced with proper udev hooks, but this is
1abd92
  a quick interim fix.
1abd92
1abd92
* Wed Jun 03 2009 Kyle McMartin <kyle@redhat.com> 1:1.17-1.50
1abd92
- Change ExclusiveArch to i586 instead of i386. Resolves rhbz#497711.
1abd92
1abd92
* Wed May 13 2009 Dave Jones <davej@redhat.com>
1abd92
- update to microcode 20090330
1abd92
1abd92
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.17-1.46.1
1abd92
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
1abd92
1abd92
* Fri Sep 12 2008 Dave Jones <davej@redhat.com>
1abd92
- update to microcode 20080910
1abd92
1abd92
* Tue Apr 01 2008 Jarod Wilson <jwilson@redhat.com>
1abd92
- Update to microcode 20080401
1abd92
1abd92
* Sat Mar 29 2008 Dave Jones <davej@redhat.com>
1abd92
- Update to microcode 20080220
1abd92
- Fix rpmlint warnings in specfile.
1abd92
1abd92
* Mon Mar 17 2008 Dave Jones <davej@redhat.com>
1abd92
- specfile cleanups.
1abd92
1abd92
* Fri Feb 22 2008 Jarod Wilson <jwilson@redhat.com>
1abd92
- Use /lib/firmware instead of /etc/firmware
1abd92
1abd92
* Wed Feb 13 2008 Jarod Wilson <jwilson@redhat.com>
1abd92
- Fix permissions on microcode.dat
1abd92
1abd92
* Thu Feb 07 2008 Jarod Wilson <jwilson@redhat.com>
1abd92
- Spec cleanup and macro standardization.
1abd92
- Update license
1abd92
- Update microcode data file to 20080131 revision.
1abd92
1abd92
* Mon Jul  2 2007 Dave Jones <davej@redhat.com>
1abd92
- Update to upstream 1.17
1abd92
1abd92
* Thu Oct 12 2006 Jon Masters <jcm@redhat.com>
1abd92
- BZ209455 fixes.
1abd92
1abd92
* Mon Jul 17 2006 Jesse Keating <jkeating@redhat.com>
1abd92
- rebuild
1abd92
1abd92
* Fri Jun 16 2006 Bill Nottingham <notting@redhat.com>
1abd92
- remove kudzu requirement
1abd92
- add prereq for coreutils, awk, grep
1abd92
1abd92
* Thu Feb 09 2006 Dave Jones <davej@redhat.com>
1abd92
- rebuild.
1abd92
1abd92
* Fri Jan 27 2006 Dave Jones <davej@redhat.com>
1abd92
- Update to upstream 1.13
1abd92
1abd92
* Fri Dec 16 2005 Jesse Keating <jkeating@redhat.com>
1abd92
- rebuilt for new gcj
1abd92
1abd92
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
1abd92
- rebuilt
1abd92
1abd92
* Mon Nov 14 2005 Dave Jones <davej@redhat.com>
1abd92
- initscript tweaks.
1abd92
1abd92
* Tue Sep 13 2005 Dave Jones <davej@redhat.com>
1abd92
- Update to upstream 1.12
1abd92
1abd92
* Wed Aug 17 2005 Dave Jones <davej@redhat.com>
1abd92
- Check for device node *after* loading the module. (#157672)
1abd92
1abd92
* Tue Mar  1 2005 Dave Jones <davej@redhat.com>
1abd92
- Rebuild for gcc4
1abd92
1abd92
* Thu Feb 17 2005 Dave Jones <davej@redhat.com>
1abd92
- s/Serial/Epoch/
1abd92
1abd92
* Tue Jan 25 2005 Dave Jones <davej@redhat.com>
1abd92
- Drop the node creation/deletion change from previous release.
1abd92
  It'll cause grief with selinux, and was a hack to get around
1abd92
  a udev shortcoming that should be fixed properly.
1abd92
1abd92
* Fri Jan 21 2005 Dave Jones <davej@redhat.com>
1abd92
- Create/remove the /dev/cpu/microcode dev node as needed.
1abd92
- Use correct path again for the microcode.dat.
1abd92
- Remove some no longer needed tests in the init script.
1abd92
1abd92
* Fri Jan 14 2005 Dave Jones <davej@redhat.com>
1abd92
- Only enable microcode_ctl service if the CPU is capable.
1abd92
- Prevent microcode_ctl getting restarted multiple times on initlevel change (#141581)
1abd92
- Make restart/reload work properly
1abd92
- Do nothing if not started by root.
1abd92
1abd92
* Wed Jan 12 2005 Dave Jones <davej@redhat.com>
1abd92
- Adjust dev node location. (#144963)
1abd92
1abd92
* Tue Jan 11 2005 Dave Jones <davej@redhat.com>
1abd92
- Load/Remove microcode module in initscript.
1abd92
1abd92
* Mon Jan 10 2005 Dave Jones <davej@redhat.com>
1abd92
- Update to upstream 1.11 release.
1abd92
1abd92
* Sat Dec 18 2004 Dave Jones <davej@redhat.com>
1abd92
- Initial packaging, based upon kernel-utils.
1abd92