lp://staging/ubuntu/vivid/intel-microcode

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

1 recipe using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

37. By Henrique de Moraes Holschuh on 2015-01-28

* New upstream microcode data file 20150121
  * Downgraded microcodes (to a previously shipped revision):
    sig 0x000306f2, pf mask 0x6f, 2014-09-03, rev 0x0029, size 28672
  * The microcode downgrade fixes a very nasty regression on Xeon E5v3
    processors (closes: #776431)
* critical urgency: the broken sig 0x306f2, rev 0x2b microcode shipped
  in release 20150107 caused CPU core hangs and Linux boot failures.
  The upstream fix was to downgrade it to the same microcode revision
  that was shipped in release 20140913
* source: remove superseded upstream data file: 20150107.
* initramfs.hook: do not mix arrays and lists.
  Avoid echo "foo $@", use echo "foo $*" instead. This is unlikely
  to be expĺoitable, but it makes ShellCheck happier.

36. By Henrique de Moraes Holschuh on 2015-01-18

* New upstream microcode data file 20150107
  + New Microcodes:
    sig 0x000306d4, pf mask 0xc0, 2014-12-05, rev 0x0018, size 14336
  + Updated Microcodes:
    sig 0x000306f2, pf mask 0x6f, 2014-11-21, rev 0x002d, size 28672
  + High urgency: there are fast-tracked microcode updates in this
    release which imply that critical errata are being fixed
* source: remove superseded upstream data file: 20140913

35. By Henrique de Moraes Holschuh on 2014-10-19

* New upstream microcode data file 20140913
  + New Microcodes:
    sig 0x000306f2, pf mask 0x6f, 2014-09-03, rev 0x0029, size 28672
  + Updated Microcodes:
    sig 0x000306c3, pf mask 0x32, 2014-07-03, rev 0x001c, size 21504
    sig 0x00040651, pf mask 0x72, 2014-07-03, rev 0x001c, size 20480
    sig 0x00040661, pf mask 0x32, 2014-07-03, rev 0x0012, size 23552
  + WARNING: UNSAFE TO BE APPLIED AT RUNTIME (lp#1370352)
* Microcode updates are now applied only through the early initramfs
  + Bump major version number
  + Requires Linux kernel v3.10 or later, other kernels unsupported
  + postinst: don't apply microcode update
  + kernel preinst: stop loading microcode module
  + modprobe.d: blacklist microcode module from autoloading outside
    of the initramfs. Still load it inside the initramfs for logging
  + initramfs: always use early initramfs mode, reject kernels before
    v3.10
  + README.Debian, NEWS.Debian: update
* add a microcode best-effort blacklist. This is a reactive blacklist
  which renames problematic microcode data files in such a way they
  will only be used for the [early] initramfs. Use it to blacklist
  all Haswell microcode updates
* Allow a non-Intel box to generate an early initramfs with microcode
  for an Intel box if the /etc/default/intel-microcode defaults are
  changed:
  + postinst: always attempt to update the initramfs
  + initramfs: on auto mode, do nothing in a non-intel box. In
    forced "early" mode, attempt to run iucode-tool. This will do
    nothing (add no microcode) unless the default configuration is
    changed in /etc/default/intel-microcode
  + default: update comments
* source: remove superseded upstream data file: 20140624
* README.source: remove information about lenny, oldstable
* debian/control: bump standards vesion to 3.9.6
* lintian-overrides: remove
* debian/copyright: update upstream copyright dates
* postrm: avoid use of test -a

34. By Tim Gardner on 2014-09-17

It appears microcode-20140913.dat introduced regressions(s)
https://bugs.launchpad.net/intel/+bug/1370352/comments/3
Deleted microcode-20140913.dat
-LP: #1370352

33. By Tim Gardner on 2014-09-17

Fixes for Haswell platforms
-LP: #1370352

32. By Tim Gardner on 2014-06-27

New upstream microcode data file 20140624
Additional update for 20140430 which has a better fix.
-LP: #1335156

31. By Henrique de Moraes Holschuh on 2014-05-03

* New upstream microcode data file 20140430
  + New microcodes:
    sig 0x000306e7, pf mask 0xed, 2014-04-14, rev 0x070c, size 15360
  + Updated microcodes:
    sig 0x000306e4, pf mask 0xed, 2014-04-10, rev 0x0427, size 12288
* source: remove superseded upstream data file: 20140122

30. By Henrique de Moraes Holschuh on 2014-02-01

* New upstream microcode data file 20140122
  + New Microcodes:
    sig 0x00040661, pf mask 0x32, 2013-08-21, rev 0x000f, size 23552
  + Updated Microcodes:
    sig 0x000106e5, pf mask 0x13, 2013-08-20, rev 0x0007, size 7168
    sig 0x000306c3, pf mask 0x32, 2013-08-16, rev 0x0017, size 20480
    sig 0x000306e4, pf mask 0xed, 2013-07-09, rev 0x0416, size 11264
    sig 0x00040651, pf mask 0x72, 2013-09-14, rev 0x0017, size 19456

29. By Henrique de Moraes Holschuh on 2013-09-21

* New upstream microcode data file 20130906
  + Updated Microcodes:
    sig 0x000306c3, pf mask 0x32, 2013-08-07, rev 0x0016, size 20480
    sig 0x00040651, pf mask 0x72, 2013-08-08, rev 0x0016, size 19456
  + Updated Microcodes (recently removed):
    sig 0x000106e4, pf mask 0x09, 2013-07-01, rev 0x0003, size 6144
* This microcode release *likely* fixes the security issues addressed by
  the 20130808 update for signature 0x106e4 (Xeon EC3500/EC5500/LC3500/
  LC5500, Jasper Forest core), which was missing from the 20130808 update
* upstream changelog: trim down, sunrise now at 20080220, the first
  microcode pack with a license that allows redistribution
* debian/control: recommend initramfs-tools (>= 0.113~) for backports
* cpu-signatures.txt: Xeon nocona cores are 64-bit, ship for amd64 arch
* source: remove superseded upstream data file: 20130808
* postinst: fix kernel version check for blacklist
  Distro kernels have version strings that make it hard to get the real
  kernel version, so we have to blacklist by branches only. We were
  refusing to update the kernel on postinst for users of Debian stable's
  kernel because of this issue

28. By Henrique de Moraes Holschuh on 2013-08-17

* Reupload, high severity, no changes
* Bump major version number. I will need this so that I can track two
  separate branches for Wheezy: branch 1.x will target stable-updates (no
  early firmware support), while branch 2.x will target stable-backports,
  testing and unstable. This major version bump should have been done for
  the 1.20130222.3 upload in hindsight.