diff -pruN 3.20260210.1/debian/changelog 3.20260210.1ubuntu1/debian/changelog --- 3.20260210.1/debian/changelog 2026-02-14 12:13:55.000000000 +0000 +++ 3.20260210.1ubuntu1/debian/changelog 2026-02-27 20:08:06.000000000 +0000 @@ -1,3 +1,19 @@ +intel-microcode (3.20260210.1ubuntu1) resolute; urgency=medium + + * SECURITY UPDATE: Merge from Debian unstable; remaining changes: + - debian/control: Add dracut and tiny-initramfs as alternative + recommends + - debian/tests/initramfs: update test for location of GenuineIntel.bin + since in Ubuntu this lives under the cpio2 initramfs so test for + its presence in any cpio + - debian/tests/control: update generic kernel dep as an alternative to + the original one from Debian + - debian/tests/initramfs: invoke update-initramfs with -c to ensure an + initrd is generated if one does not already exist so that the rest + of the test can proceed as expected + + -- Rodrigo Figueiredo Zaiden Fri, 27 Feb 2026 17:08:06 -0300 + intel-microcode (3.20260210.1) unstable; urgency=medium * New upstream microcode datafile 20260210 (closes: #1127837) @@ -111,6 +127,22 @@ intel-microcode (3.20251111.1) unstable; -- Henrique de Moraes Holschuh Thu, 13 Nov 2025 12:48:02 -0300 +intel-microcode (3.20250812.1ubuntu1) resolute; urgency=medium + + * SECURITY UPDATE: Merge from Debian unstable; remaining changes: + - debian/control: Add dracut and tiny-initramfs as alternative + recommends + - debian/tests/initramfs: update test for location of GenuineIntel.bin + since in Ubuntu this lives under the cpio2 initramfs so test for + its presence in any cpio + - debian/tests/control: update generic kernel dep as an alternative to + the original one from Debian + - debian/tests/initramfs: invoke update-initramfs with -c to ensure an + initrd is generated if one does not already exist so that the rest + of the test can proceed as expected + + -- Rodrigo Figueiredo Zaiden Mon, 27 Oct 2025 19:32:19 -0300 + intel-microcode (3.20250812.1) unstable; urgency=medium [ Henrique de Moraes Holschuh ] @@ -196,6 +228,22 @@ intel-microcode (3.20250812.1) unstable; -- Henrique de Moraes Holschuh Sat, 13 Sep 2025 18:30:55 -0300 +intel-microcode (3.20250512.1ubuntu1) questing; urgency=medium + + * SECURITY UPDATE: Merge from Debian unstable; remaining changes: + - debian/control: Add dracut and tiny-initramfs as alternative + recommends + - debian/tests/initramfs: update test for location of GenuineIntel.bin + since in Ubuntu this lives under the cpio2 initramfs so test for + its presence in any cpio + - debian/tests/control: update generic kernel dep as an alternative to + the original one from Debian + - debian/tests/initramfs: invoke update-initramfs with -c to ensure an + initrd is generated if one does not already exist so that the rest + of the test can proceed as expected + + -- Marc Deslauriers Tue, 20 May 2025 09:08:39 -0400 + intel-microcode (3.20250512.1) unstable; urgency=high * New upstream microcode datafile 20250512 (closes: #1105172) @@ -236,12 +284,6 @@ intel-microcode (3.20250512.1) unstable; firmware update, but according to Intel it should be effective when loaded by the operating system if the system firmware has revision 0x12e. - - Mitgations for INTEL-SA-01249 (processor Stream Cache): - CVE-2025-20109: Improper Isolation or Compartmentalization in the - stream cache mechanism for some Intel Processors may allow an - authenticated user to potentially enable escalation of privilege via - local access. This information was disclosed by Intel for release - 20250812. - Fixes for unspecified functional issues on several processor models * New microcodes or new extended signatures: sig 0x000a06d1, pf_mask 0x95, 2025-02-07, rev 0x10003a2, size 1664000 @@ -310,6 +352,22 @@ intel-microcode (3.20250512.1) unstable; -- Henrique de Moraes Holschuh Sat, 17 May 2025 01:35:08 -0300 +intel-microcode (3.20250211.1ubuntu1) plucky; urgency=medium + + * SECURITY UPDATE: Merge from Debian unstable; remaining changes: + - debian/control: Add dracut and tiny-initramfs as alternative + recommends + - debian/tests/initramfs: update test for location of GenuineIntel.bin + since in Ubuntu this lives under the cpio2 initramfs so test for + its presence in any cpio + - debian/tests/control: update generic kernel dep as an alternative to + the original one from Debian + - debian/tests/initramfs: invoke update-initramfs with -c to ensure an + initrd is generated if one does not already exist so that the rest + of the test can proceed as expected + + -- Alex Murray Tue, 25 Feb 2025 13:45:25 +1030 + intel-microcode (3.20250211.1) unstable; urgency=medium * New upstream microcode datafile 20250211 (closes: #1095805) @@ -380,6 +438,27 @@ intel-microcode (3.20250211.1) unstable; -- Henrique de Moraes Holschuh Sun, 16 Feb 2025 18:34:38 -0300 +intel-microcode (3.20241112.1ubuntu2) plucky; urgency=medium + + * Add dracut and tiny-initramfs as alternative recommends + (Closes: #1088079). + + -- Simon Quigley Fri, 22 Nov 2024 14:57:31 -0600 + +intel-microcode (3.20241112.1ubuntu1) plucky; urgency=medium + + * Merge from Debian unstable; remaining changes: + - debian/tests/initramfs: update test for location of GenuineIntel.bin + since in Ubuntu this lives under the early2 initramfs so test for its + presence in any early + - debian/tests/control: update generic kernel dep as an alternative to + the original one from Debian + * debian/tests/initramfs: invoke update-initramfs with -c to ensure an + initrd is generated if one does not already exist so that the rest of + the test can proceed as expected + + -- Alex Murray Mon, 18 Nov 2024 15:31:16 +1030 + intel-microcode (3.20241112.1) unstable; urgency=medium * New upstream microcode datafile 20241112 (closes: #1086483) @@ -472,6 +551,46 @@ intel-microcode (3.20240910.1) unstable; -- Henrique de Moraes Holschuh Sat, 21 Sep 2024 16:40:07 -0300 +intel-microcode (3.20240910.0ubuntu1) oracular; urgency=medium + + * SECURITY UPDATE: New upstream microcode datafile 20240910 + - Updated microcodes: + sig 0x00090672, pf_mask 0x07, 2024-02-22, rev 0x0036, size 224256 + sig 0x00090675, pf_mask 0x07, 2024-02-22, rev 0x0036, size 224256 + sig 0x000906a3, pf_mask 0x80, 2024-02-22, rev 0x0434, size 222208 + sig 0x000906a4, pf_mask 0x80, 2024-02-22, rev 0x0434, size 222208 + sig 0x000a06a4, pf_mask 0xe6, 2024-06-17, rev 0x001f, size 137216 + sig 0x000b0671, pf_mask 0x32, 2024-07-18, rev 0x0129, size 215040 + sig 0x000b06a2, pf_mask 0xe0, 2024-02-22, rev 0x4122, size 220160 + sig 0x000b06a3, pf_mask 0xe0, 2024-02-22, rev 0x4122, size 220160 + sig 0x000b06a8, pf_mask 0xe0, 2024-02-22, rev 0x4122, size 220160 + sig 0x000b06e0, pf_mask 0x19, 2024-03-25, rev 0x001a, size 138240 + sig 0x000b06f2, pf_mask 0x07, 2024-02-22, rev 0x0036, size 224256 + sig 0x000b06f5, pf_mask 0x07, 2024-02-22, rev 0x0036, size 224256 + - CVE-2024-23984 (INTEL-SA-01103) + - CVE-2024-24968 (INTEL-SA-01097) + * source: update symlinks to reflect id of the latest release, 20240910 + + -- Alex Murray Thu, 12 Sep 2024 10:10:13 +0930 + +intel-microcode (3.20240813.2ubuntu2) oracular; urgency=medium + + [ Alex Murray ] + * debian/tests/initramfs: update test for location of GenuineIntel.bin + since in Ubuntu this lives under the early2 initramfs so test for its + presence in any early + + [ Timo Aaltonen ] + * tests: Modify generic kernel dep as an alternative to the original one. + + -- Timo Aaltonen Fri, 30 Aug 2024 06:36:27 +0300 + +intel-microcode (3.20240813.2ubuntu1) oracular; urgency=medium + + * tests: Fix the kernel pkg name. + + -- Timo Aaltonen Thu, 29 Aug 2024 17:34:29 +0300 + intel-microcode (3.20240813.2) unstable; urgency=high * Merge changes from intel-microcode/3.20240531.1+nmu1, which were left out diff -pruN 3.20260210.1/debian/control 3.20260210.1ubuntu1/debian/control --- 3.20260210.1/debian/control 2026-02-14 02:53:00.000000000 +0000 +++ 3.20260210.1ubuntu1/debian/control 2026-02-27 20:02:03.000000000 +0000 @@ -1,7 +1,8 @@ Source: intel-microcode Section: non-free-firmware/admin Priority: standard -Maintainer: Henrique de Moraes Holschuh +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Henrique de Moraes Holschuh Uploaders: Giacomo Catenazzi Build-Depends: debhelper (>= 9), iucode-tool (>= 0.9) Standards-Version: 4.1.1 @@ -13,7 +14,7 @@ XS-Autobuild: yes Package: intel-microcode Architecture: i386 amd64 x32 Depends: ${misc:Depends}, iucode-tool (>= 1.0) -Recommends: initramfs-tools (>= 0.113~) +Recommends: initramfs-tools (>= 0.113~) | dracut (>= 044) | tiny-initramfs Conflicts: microcode.ctl (<< 0.18~0) Description: Processor microcode firmware for Intel CPUs This package contains updated system processor microcode for diff -pruN 3.20260210.1/debian/tests/control 3.20260210.1ubuntu1/debian/tests/control --- 3.20260210.1/debian/tests/control 2026-02-14 02:53:00.000000000 +0000 +++ 3.20260210.1ubuntu1/debian/tests/control 2026-02-27 20:02:03.000000000 +0000 @@ -2,6 +2,6 @@ Tests: initramfs Architecture: amd64 Depends: @, - linux-image-amd64, + linux-image-amd64 | linux-image-generic, initramfs-tools, Restrictions: needs-root, allow-stderr, superficial diff -pruN 3.20260210.1/debian/tests/initramfs 3.20260210.1ubuntu1/debian/tests/initramfs --- 3.20260210.1/debian/tests/initramfs 2026-02-14 02:53:00.000000000 +0000 +++ 3.20260210.1ubuntu1/debian/tests/initramfs 2026-02-27 20:02:03.000000000 +0000 @@ -1,18 +1,12 @@ #!/bin/bash set -ex -o pipefail -update-initramfs -kall -u +update-initramfs -kall -u -c INITRDS=(/boot/initrd.img-*) unmkinitramfs "${INITRDS[0]}" initramfs/ find initramfs/ -# Microcode may be extracted under an early/ subdirectory, depending -# on the version of unmkinitramfs -if [ -d initramfs/early ]; then - test -e initramfs/early/kernel/x86/microcode/GenuineIntel.bin -else - test -e initramfs/kernel/x86/microcode/GenuineIntel.bin -fi +test -e initramfs/cpio*/kernel/x86/microcode/GenuineIntel.bin echo '# everything seems ok'