aboutsummaryrefslogtreecommitdiffstats
path: root/main/intel-ucode/APKBUILD
diff options
context:
space:
mode:
Diffstat (limited to 'main/intel-ucode/APKBUILD')
-rw-r--r--main/intel-ucode/APKBUILD61
1 files changed, 58 insertions, 3 deletions
diff --git a/main/intel-ucode/APKBUILD b/main/intel-ucode/APKBUILD
index 00bb0b57aac..c2528ff91ee 100644
--- a/main/intel-ucode/APKBUILD
+++ b/main/intel-ucode/APKBUILD
@@ -1,16 +1,69 @@
# Maintainer: Marian Buschsieweke <marian.buschsieweke@ovgu.de>
pkgname=intel-ucode
-pkgver=20210608
+pkgver=20240312
pkgrel=0
pkgdesc="Microcode update files for Intel CPUs"
arch="x86 x86_64"
-url="https://downloadcenter.intel.com/SearchResult.aspx?lang=eng&keyword=%22microcode%22"
+url="https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files"
license="custom"
makedepends="iucode-tool"
source="https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/archive/microcode-$pkgver.tar.gz"
options="!check"
builddir="$srcdir/Intel-Linux-Processor-Microcode-Data-Files-microcode-$pkgver"
+# (Taken from https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/main/releasenote.md)
+# secfixes:
+# 20240312-40:
+# - CVE-2023-39368
+# - CVE-2023-38575
+# - CVE-2023-28746
+# - CVE-2023-22655
+# - CVE-2023-43490
+# 20231114-r0:
+# - CVE-2023-23583
+# 20230808-r0:
+# - CVE-2022-40982
+# - CVE-2022-41804
+# - CVE-2023-23908
+# 20230214-r0:
+# - CVE-2022-21216
+# - CVE-2022-33196
+# - CVE-2022-38090
+# 20220809-r0:
+# - CVE-2022-21233
+# 20220510-r0:
+# - CVE-2022-21151
+# 20220207-r0:
+# - CVE-2021-0127
+# - CVE-2021-0146
+# 20210608-r0:
+# - CVE-2020-24489
+# - CVE-2020-24511
+# - CVE-2020-24513
+# 20210216-r0:
+# - CVE-2020-8698
+# 20201112-r0:
+# - CVE-2020-8694
+# - CVE-2020-8698
+# 20201110-r0:
+# - CVE-2020-8694
+# - CVE-2020-8698
+# 20200609-r0:
+# - CVE-2020-0548
+# 20191113-r0:
+# - CVE-2019-11135
+# 20191112-r0:
+# - CVE-2018-12126
+# - CVE-2019-11135
+# 20190918-r0:
+# - CVE-2019-11135
+# 20190618-r0:
+# - CVE-2018-12126
+# 20190514a-r0:
+# - CVE-2018-12126
+# - CVE-2017-5754
+# - CVE-2017-5753
+
build() {
rm -f intel-ucode/list intel-ucode-with-caveats/list
mkdir -p kernel/x86/microcode
@@ -25,4 +78,6 @@ package() {
install -Dm644 license "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
}
-sha512sums="61acd2e76aa019fa0002fbf56c503791080a937ff93d81e020f8f0cc089dc08928b4c7e9884f713b886e2f9d4a8409fea59e39f628ef534a588515e1c3fc861d microcode-20210608.tar.gz"
+sha512sums="
+f5f3dfb1706675060b00057b5f017c2cb4ac0df74727139185fd167ca67fc6c611e205b1caeded23b006e4d8d314f87537007e7bafba2c87373f6d960988c911 microcode-20240312.tar.gz
+"