public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/microcode_ctl] rawhide: Update to microcode-20260812 release
@ 2026-08-27  5:36 Denys Vlasenko
  0 siblings, 0 replies; only message in thread
From: Denys Vlasenko @ 2026-08-27  5:36 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/microcode_ctl
            Branch : rawhide
            Commit : 6d3372cbabd928825d3128094aff2f6758838dc5
            Author : Denys Vlasenko <dvlasenk@redhat.com>
            Date   : 2026-08-27T07:35:34+02:00
            Stats  : +71/-17 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/microcode_ctl/c/6d3372cbabd928825d3128094aff2f6758838dc5?branch=rawhide

            Log:
            Update to microcode-20260812 release

- Update Intel CPU microcode to microcode-20260812 release
- Security advisories:
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html
  CVE-2025-31936
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01404.html
  CVE-2025-31938
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01423.html
  CVE-2026-20917
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html
  CVE-2025-35973
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01435.html
  CVE-2026-20716
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01441.html
  CVE-2026-20760
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html
  CVE-2026-20713, CVE-2026-20901
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html
  CVE-2026-20707
- New microcode files (in hex):
  06-b7-04: Raptor Lake: revision 0137
  06-d5-01: Wildcat Lake: revision 000c
  06-d7-00: Bartlett Lake: revision 0137
- Microcode files (/platform_mask shown) with revision updates (in hex):
  06-6a-06/87: Ice Lake-X: d000421 to d000433
  06-6c-01/10: Ice Lake-D: 10002f1 to 1000301
  06-7e-05/80: Ice Lake-L: 00cc to 00ce
  06-8f-07/87: Sapphire Rapids: 2b000670 to 2b000685
  06-8f-08/10: Sapphire Rapids with HBM: 2c000421 to 2c000435
  06-8f-08/87: Sapphire Rapids: 2b000670 to 2b000685
  06-a7-01/02: Rocket Lake: 0065 to 0066
  06-ad-01/20: Granite Rapids-X: a000142 to a000151
  06-ad-01/95: Granite Rapids-X: 1000423 to 1000434
  06-ae-01/97: Granite Rapids-D: 1000307 to 1000309
  06-af-03/01: Crestmont (Sierra Forest): 30003a3 to 30003b2
  06-b5-00/80: Arrow Lake-U: 000d to 000e
  06-b7-01/36: Raptor Lake: 0133 to 0137, platform bit 04 added
  06-bd-01/80: Lunar Lake: 0126 to 0128
  06-c5-02/82: Arrow Lake-H: 0121 to 0122
  06-c6-02/82: Arrow Lake: 0121 to 0122
  06-cc-02/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
  06-cc-03/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
  06-cf-02/87: Emerald Rapids: 210002e0 to 210002f4

Signed-off-by: Denys Vlasenko <dvlasenk@redhat.com>

---
diff --git a/microcode_ctl.spec b/microcode_ctl.spec
index e93b5b5..05eaf2a 100644
--- a/microcode_ctl.spec
+++ b/microcode_ctl.spec
@@ -1,41 +1,95 @@
-%define upstream_version 2.1-52
+%define intel_ucode_version 20260812
+
+# We have no debuginfo/debugsources
 %global debug_package %{nil}
 
-Summary:        Tool to transform and deploy CPU microcode update for x86
+Summary:        CPU microcode updates for Intel x86 processors
 Name:           microcode_ctl
-Version:        2.1
-Release:        76%{?dist}
+Version:        %{intel_ucode_version}
+Release:        1%{?dist}
 Epoch:          2
 License:        GPL-2.0-or-later AND LicenseRef-Fedora-Firmware
-URL:            https://pagure.io/microcode_ctl
-Source0:        https://releases.pagure.org/microcode_ctl/%{name}-%{upstream_version}.tar.xz
+URL:            https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files
+Source0:        https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/archive/microcode-%{intel_ucode_version}.tar.gz
 ExclusiveArch:  %{ix86} x86_64
 BuildRequires:  make
 
 %description
-The microcode_ctl utility is a companion to the microcode driver written
-by Tigran Aivazian <tigran@aivazian.fsnet.co.uk>.
+This package provides microcode update files for Intel x86 and x86_64 CPUs.
 
 The microcode update is volatile and needs to be uploaded on each system
-boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts
+boot i.e. it isn't stored on a CPU permanently; reboot and it reverts
 back to the old microcode.
 
+Package name "microcode_ctl" is historical, as the binary with the same name
+is no longer used for microcode upload and, as a result, no longer provided.
+
 %prep
-%setup -q -n %{name}-%{upstream_version}
+# -n DIR: expect DIR in the tarball
+%setup -n "Intel-Linux-Processor-Microcode-Data-Files-microcode-%{intel_ucode_version}"
+# rpmbuild cd's into DIR after setup is successful
 
 %build
-make CFLAGS="$RPM_OPT_FLAGS" %{?_smp_mflags}
+:
 
 %install
-make DESTDIR=%{buildroot} PREFIX=%{_prefix} INSDIR=/usr/sbin install clean
+# we are in xyz/Intel-Linux-Processor-Microcode-Data-Files-microcode-<VERSION>.
+# buildroot is usually ../BUILDROOT relative to where we are now.
+install -m 755 -d                         "%{buildroot}/usr/lib/firmware/intel-ucode/"
+install -m 755 -d                         "%{buildroot}/usr/lib/firmware/intel-ucode/intel-ucode-with-caveats/"
+install -m 644 intel-ucode/*              "%{buildroot}/usr/lib/firmware/intel-ucode/"
+install -m 644 intel-ucode-with-caveats/* "%{buildroot}/usr/lib/firmware/intel-ucode/intel-ucode-with-caveats/"
 
 %files
-/lib/firmware/*
-%dir /usr/share/doc/microcode_ctl
-%doc /usr/share/doc/microcode_ctl/*
-
+/usr/lib/firmware/*
+##%dir /usr/share/doc/microcode_ctl
+##%doc /usr/share/doc/microcode_ctl/*
 
 %changelog
+* Thu Aug 27 2026 Denys Vlasenko <dvlasenk@redhat.com> 2:20260812-1
+- Update Intel CPU microcode to microcode-20260812 release
+- Security advisories:
+  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html
+  CVE-2025-31936
+  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01404.html
+  CVE-2025-31938
+  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01423.html
+  CVE-2026-20917
+  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01428.html
+  CVE-2025-35973
+  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01435.html
+  CVE-2026-20716
+  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01441.html
+  CVE-2026-20760
+  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html
+  CVE-2026-20713, CVE-2026-20901
+  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01443.html
+  CVE-2026-20707
+- New microcode files (in hex):
+  06-b7-04: Raptor Lake: revision 0137
+  06-d5-01: Wildcat Lake: revision 000c
+  06-d7-00: Bartlett Lake: revision 0137
+- Microcode files (/platform_mask shown) with revision updates (in hex):
+  06-6a-06/87: Ice Lake-X: d000421 to d000433
+  06-6c-01/10: Ice Lake-D: 10002f1 to 1000301
+  06-7e-05/80: Ice Lake-L: 00cc to 00ce
+  06-8f-07/87: Sapphire Rapids: 2b000670 to 2b000685
+  06-8f-08/10: Sapphire Rapids with HBM: 2c000421 to 2c000435
+  06-8f-08/87: Sapphire Rapids: 2b000670 to 2b000685
+  06-a7-01/02: Rocket Lake: 0065 to 0066
+  06-ad-01/20: Granite Rapids-X: a000142 to a000151
+  06-ad-01/95: Granite Rapids-X: 1000423 to 1000434
+  06-ae-01/97: Granite Rapids-D: 1000307 to 1000309
+  06-af-03/01: Crestmont (Sierra Forest): 30003a3 to 30003b2
+  06-b5-00/80: Arrow Lake-U: 000d to 000e
+  06-b7-01/36: Raptor Lake: 0133 to 0137, platform bit 04 added
+  06-bd-01/80: Lunar Lake: 0126 to 0128
+  06-c5-02/82: Arrow Lake-H: 0121 to 0122
+  06-c6-02/82: Arrow Lake: 0121 to 0122
+  06-cc-02/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
+  06-cc-03/94: Panther Lake: 011b to 011c, platform bit 04 added, also used for 06-e5-02
+  06-cf-02/87: Emerald Rapids: 210002e0 to 210002f4
+
 * Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2:2.1-76
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
 

diff --git a/sources b/sources
index 4dcb915..9154471 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (microcode_ctl-2.1-52.tar.xz) = 00b10f886c12054b14be9cca74df42ffdec3c481b0fc64dfaa09869e3931e6067d6c4ab12e5fb7ad14dad2ec6ef65d3490b8b1dd7a7f2253b41b518cb249cc8d
+SHA512 (microcode-20260812.tar.gz) = 847935813453368ba890839e422a71912a8f53cc1256cd6800849976b58929d8415641d521ab3a7523262e0ef76058fb5db228f68e467424d45846d0f1ab2ebc

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-08-27  5:36 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-27  5:36 [rpms/microcode_ctl] rawhide: Update to microcode-20260812 release Denys Vlasenko

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox