blob: d508671db0bd31cfc7eaaef82b4d6e8e005e65bb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
# Maintainer: Marian Buschsieweke <marian.buschsieweke@ovgu.de>
pkgname=intel-ucode
pkgver=20220510
pkgrel=0
pkgdesc="Microcode update files for Intel CPUs"
arch="x86 x86_64"
url="https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files"
license="custom"
makedepends="iucode-tool"
source="https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/archive/microcode-$pkgver.tar.gz"
options="!check"
builddir="$srcdir/Intel-Linux-Processor-Microcode-Data-Files-microcode-$pkgver"
# (Taken from https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/main/releasenote.md)
# secfixes:
# 20220510-r0:
# - CVE-2022-21151
# 20220207-r0:
# - CVE-2021-0127
# - CVE-2021-0146
# 20210608-r0:
# - CVE-2020-24489
# - CVE-2020-24511
# - CVE-2020-24513
# 20210216-r0:
# - CVE-2020-8698
# 20201112-r0:
# - CVE-2020-8694
# - CVE-2020-8698
# 20201110-r0:
# - CVE-2020-8694
# - CVE-2020-8698
# 20200609-r0:
# - CVE-2020-0548
# 20191113-r0:
# - CVE-2019-11135
# 20191112-r0:
# - CVE-2018-12126
# - CVE-2019-11135
# 20190918-r0:
# - CVE-2019-11135
# 20190618-r0:
# - CVE-2018-12126
# 20190514a-r0:
# - CVE-2018-12126
# - CVE-2017-5754
# - CVE-2017-5753
build() {
rm -f intel-ucode/list intel-ucode-with-caveats/list
mkdir -p kernel/x86/microcode
iucode_tool -w kernel/x86/microcode/GenuineIntel.bin \
intel-ucode/ intel-ucode-with-caveats/
echo kernel/x86/microcode/GenuineIntel.bin | \
cpio -o -H newc -R 0:0 > intel-ucode.img
}
package() {
install -D -m0644 intel-ucode.img "$pkgdir"/boot/intel-ucode.img
install -Dm644 license "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
}
sha512sums="
00329ce62a6d9cc66fb8594d132ef67951086ab1250ceaf908d5a357753ed62557275f55c5eb7b3ad55d1fdd312b5d1a436b214cdcbf6e3e1a840c8bf6f4795d microcode-20220510.tar.gz
"
|
