Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250211
CVE-2024-31068:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html
CVE-2024-36293
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html
CVE-2023-43758, CVE-2023-34440, CVE-2024-24582, CVE-2024-29214,
CVE-2024-28127, CVE-2024-39279, CVE-2024-31157 & CVE-2024-28047:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html
CVE-2024-39355:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html
CVE-2024-37020:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01194.html
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 67a0f96b88)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
36 lines
1.1 KiB
Makefile
36 lines
1.1 KiB
Makefile
################################################################################
|
|
#
|
|
# intel-microcode
|
|
#
|
|
################################################################################
|
|
|
|
INTEL_MICROCODE_VERSION = 20250211
|
|
INTEL_MICROCODE_SITE = $(call github,intel,Intel-Linux-Processor-Microcode-Data-Files,microcode-$(INTEL_MICROCODE_VERSION))
|
|
INTEL_MICROCODE_LICENSE = PROPRIETARY
|
|
INTEL_MICROCODE_LICENSE_FILES = license
|
|
INTEL_MICROCODE_REDISTRIBUTE = NO
|
|
INTEL_MICROCODE_INSTALL_IMAGES = YES
|
|
|
|
define INTEL_MICROCODE_INSTALL_IMAGES_CMDS
|
|
mkdir -p $(BINARIES_DIR)/intel-ucode
|
|
$(INSTALL) -m 0644 -t $(BINARIES_DIR)/intel-ucode \
|
|
$(@D)/intel-ucode/*
|
|
endef
|
|
|
|
ifeq ($(BR2_PACKAGE_INTEL_MICROCODE_INSTALL_TARGET),y)
|
|
define INTEL_MICROCODE_INSTALL_TARGET_CMDS
|
|
mkdir -p $(TARGET_DIR)/lib/firmware/intel-ucode
|
|
$(INSTALL) -m 0644 -t $(TARGET_DIR)/lib/firmware/intel-ucode \
|
|
$(@D)/intel-ucode/*
|
|
endef
|
|
else
|
|
INTEL_MICROCODE_INSTALL_TARGET = NO
|
|
endif
|
|
|
|
define INTEL_MICROCODE_LINUX_CONFIG_FIXUPS
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_MICROCODE)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_MICROCODE_INTEL)
|
|
endef
|
|
|
|
$(eval $(generic-package))
|