package/intel-microcode: security bump to version 20191112
authorPeter Korsgaard <peter@korsgaard.com>
Wed, 13 Nov 2019 16:18:49 +0000 (17:18 +0100)
committerYann E. MORIN <yann.morin.1998@free.fr>
Wed, 13 Nov 2019 18:45:52 +0000 (19:45 +0100)
Contains mitigations for the following security vulnerabilities:

- CVE-2019-11135: Intel TSX Asynchronous Abort vulnerability:
  https://software.intel.com/security-software-guidance/insights/deep-dive-intel-transactional-synchronization-extensions-intel-tsx-asynchronous-abort

- CVE-2019-11139: Intel Xeon Scalable Processors Voltage Setting Modulation
  vulnerability:
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00271.html

Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20191112

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
package/intel-microcode/intel-microcode.hash
package/intel-microcode/intel-microcode.mk

index 5d340e627f340cf14d5bb6dc4ca04daa1fdd7f9f..f9fce28b2da2750c7fc59a20646cbaeb4a4b1a1c 100644 (file)
@@ -1,3 +1,3 @@
 # Locally computed
-sha256 2b6b728d351764dfbf6a9763ac96ae7e04085f382a309fed3abc0118f094c943  intel-microcode-20190918.tar.gz
+sha256 0000f7cf96f2b07a1ba9d1fc0bcfcb49d0edb91f7d487a57a88c147e57c5873b  intel-microcode-20191112.tar.gz
 sha256 1f8bf63fc2b1b486c507b98ff7d283c7eb58c7945746b94188a310d6787cbee5  license
index a4d4a01f71c06339dd2bff4f328688b285f958f8..0492ace69e65dc556c7c80697d0084b271582491 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-INTEL_MICROCODE_VERSION = 20190918
+INTEL_MICROCODE_VERSION = 20191112
 INTEL_MICROCODE_SITE = $(call github,intel,Intel-Linux-Processor-Microcode-Data-Files,microcode-$(INTEL_MICROCODE_VERSION))
 INTEL_MICROCODE_LICENSE = PROPRIETARY
 INTEL_MICROCODE_LICENSE_FILES = license