public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Denys Vlasenko <dvlasenk@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/microcode_ctl] rawhide: Update to microcode-20260812 release
Date: Thu, 27 Aug 2026 05:36:02 GMT [thread overview]
Message-ID: <178780896260.1.17502790006055989268.rpms-microcode_ctl-6d3372cbabd9@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/microcode_ctl
Branch : rawhide
Commit : 6d3372cbabd928825d3128094aff2f6758838dc5
Author : Denys Vlasenko <dvlasenk@redhat.com>
Date : 2026-08-27T07:35:34+02:00
Stats : +71/-17 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/microcode_ctl/c/6d3372cbabd928825d3128094aff2f6758838dc5?branch=rawhide
Log:
Update to microcode-20260812 release
- Update Intel CPU microcode to microcode-20260812 release
- Security advisories:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html
CVE-2025-31936
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01404.html
CVE-2025-31938
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01423.html
CVE-2026-20917
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html
CVE-2025-35973
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01435.html
CVE-2026-20716
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01441.html
CVE-2026-20760
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html
CVE-2026-20713, CVE-2026-20901
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html
CVE-2026-20707
- New microcode files (in hex):
06-b7-04: Raptor Lake: revision 0137
06-d5-01: Wildcat Lake: revision 000c
06-d7-00: Bartlett Lake: revision 0137
- Microcode files (/platform_mask shown) with revision updates (in hex):
06-6a-06/87: Ice Lake-X: d000421 to d000433
06-6c-01/10: Ice Lake-D: 10002f1 to 1000301
06-7e-05/80: Ice Lake-L: 00cc to 00ce
06-8f-07/87: Sapphire Rapids: 2b000670 to 2b000685
06-8f-08/10: Sapphire Rapids with HBM: 2c000421 to 2c000435
06-8f-08/87: Sapphire Rapids: 2b000670 to 2b000685
06-a7-01/02: Rocket Lake: 0065 to 0066
06-ad-01/20: Granite Rapids-X: a000142 to a000151
06-ad-01/95: Granite Rapids-X: 1000423 to 1000434
06-ae-01/97: Granite Rapids-D: 1000307 to 1000309
06-af-03/01: Crestmont (Sierra Forest): 30003a3 to 30003b2
06-b5-00/80: Arrow Lake-U: 000d to 000e
06-b7-01/36: Raptor Lake: 0133 to 0137, platform bit 04 added
06-bd-01/80: Lunar Lake: 0126 to 0128
06-c5-02/82: Arrow Lake-H: 0121 to 0122
06-c6-02/82: Arrow Lake: 0121 to 0122
06-cc-02/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
06-cc-03/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
06-cf-02/87: Emerald Rapids: 210002e0 to 210002f4
Signed-off-by: Denys Vlasenko <dvlasenk@redhat.com>
---
diff --git a/microcode_ctl.spec b/microcode_ctl.spec
index e93b5b5..05eaf2a 100644
--- a/microcode_ctl.spec
+++ b/microcode_ctl.spec
@@ -1,41 +1,95 @@
-%define upstream_version 2.1-52
+%define intel_ucode_version 20260812
+
+# We have no debuginfo/debugsources
%global debug_package %{nil}
-Summary: Tool to transform and deploy CPU microcode update for x86
+Summary: CPU microcode updates for Intel x86 processors
Name: microcode_ctl
-Version: 2.1
-Release: 76%{?dist}
+Version: %{intel_ucode_version}
+Release: 1%{?dist}
Epoch: 2
License: GPL-2.0-or-later AND LicenseRef-Fedora-Firmware
-URL: https://pagure.io/microcode_ctl
-Source0: https://releases.pagure.org/microcode_ctl/%{name}-%{upstream_version}.tar.xz
+URL: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files
+Source0: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/archive/microcode-%{intel_ucode_version}.tar.gz
ExclusiveArch: %{ix86} x86_64
BuildRequires: make
%description
-The microcode_ctl utility is a companion to the microcode driver written
-by Tigran Aivazian <tigran@aivazian.fsnet.co.uk>.
+This package provides microcode update files for Intel x86 and x86_64 CPUs.
The microcode update is volatile and needs to be uploaded on each system
-boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts
+boot i.e. it isn't stored on a CPU permanently; reboot and it reverts
back to the old microcode.
+Package name "microcode_ctl" is historical, as the binary with the same name
+is no longer used for microcode upload and, as a result, no longer provided.
+
%prep
-%setup -q -n %{name}-%{upstream_version}
+# -n DIR: expect DIR in the tarball
+%setup -n "Intel-Linux-Processor-Microcode-Data-Files-microcode-%{intel_ucode_version}"
+# rpmbuild cd's into DIR after setup is successful
%build
-make CFLAGS="$RPM_OPT_FLAGS" %{?_smp_mflags}
+:
%install
-make DESTDIR=%{buildroot} PREFIX=%{_prefix} INSDIR=/usr/sbin install clean
+# we are in xyz/Intel-Linux-Processor-Microcode-Data-Files-microcode-<VERSION>.
+# buildroot is usually ../BUILDROOT relative to where we are now.
+install -m 755 -d "%{buildroot}/usr/lib/firmware/intel-ucode/"
+install -m 755 -d "%{buildroot}/usr/lib/firmware/intel-ucode/intel-ucode-with-caveats/"
+install -m 644 intel-ucode/* "%{buildroot}/usr/lib/firmware/intel-ucode/"
+install -m 644 intel-ucode-with-caveats/* "%{buildroot}/usr/lib/firmware/intel-ucode/intel-ucode-with-caveats/"
%files
-/lib/firmware/*
-%dir /usr/share/doc/microcode_ctl
-%doc /usr/share/doc/microcode_ctl/*
-
+/usr/lib/firmware/*
+##%dir /usr/share/doc/microcode_ctl
+##%doc /usr/share/doc/microcode_ctl/*
%changelog
+* Thu Aug 27 2026 Denys Vlasenko <dvlasenk@redhat.com> 2:20260812-1
+- Update Intel CPU microcode to microcode-20260812 release
+- Security advisories:
+ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html
+ CVE-2025-31936
+ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01404.html
+ CVE-2025-31938
+ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01423.html
+ CVE-2026-20917
+ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html
+ CVE-2025-35973
+ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01435.html
+ CVE-2026-20716
+ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01441.html
+ CVE-2026-20760
+ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html
+ CVE-2026-20713, CVE-2026-20901
+ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html
+ CVE-2026-20707
+- New microcode files (in hex):
+ 06-b7-04: Raptor Lake: revision 0137
+ 06-d5-01: Wildcat Lake: revision 000c
+ 06-d7-00: Bartlett Lake: revision 0137
+- Microcode files (/platform_mask shown) with revision updates (in hex):
+ 06-6a-06/87: Ice Lake-X: d000421 to d000433
+ 06-6c-01/10: Ice Lake-D: 10002f1 to 1000301
+ 06-7e-05/80: Ice Lake-L: 00cc to 00ce
+ 06-8f-07/87: Sapphire Rapids: 2b000670 to 2b000685
+ 06-8f-08/10: Sapphire Rapids with HBM: 2c000421 to 2c000435
+ 06-8f-08/87: Sapphire Rapids: 2b000670 to 2b000685
+ 06-a7-01/02: Rocket Lake: 0065 to 0066
+ 06-ad-01/20: Granite Rapids-X: a000142 to a000151
+ 06-ad-01/95: Granite Rapids-X: 1000423 to 1000434
+ 06-ae-01/97: Granite Rapids-D: 1000307 to 1000309
+ 06-af-03/01: Crestmont (Sierra Forest): 30003a3 to 30003b2
+ 06-b5-00/80: Arrow Lake-U: 000d to 000e
+ 06-b7-01/36: Raptor Lake: 0133 to 0137, platform bit 04 added
+ 06-bd-01/80: Lunar Lake: 0126 to 0128
+ 06-c5-02/82: Arrow Lake-H: 0121 to 0122
+ 06-c6-02/82: Arrow Lake: 0121 to 0122
+ 06-cc-02/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
+ 06-cc-03/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
+ 06-cf-02/87: Emerald Rapids: 210002e0 to 210002f4
+
* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2:2.1-76
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
diff --git a/sources b/sources
index 4dcb915..9154471 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (microcode_ctl-2.1-52.tar.xz) = 00b10f886c12054b14be9cca74df42ffdec3c481b0fc64dfaa09869e3931e6067d6c4ab12e5fb7ad14dad2ec6ef65d3490b8b1dd7a7f2253b41b518cb249cc8d
+SHA512 (microcode-20260812.tar.gz) = 847935813453368ba890839e422a71912a8f53cc1256cd6800849976b58929d8415641d521ab3a7523262e0ef76058fb5db228f68e467424d45846d0f1ab2ebc
reply other threads:[~2026-08-27 5:36 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178780896260.1.17502790006055989268.rpms-microcode_ctl-6d3372cbabd9@fedoraproject.org \
--to=dvlasenk@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox