firmware: intel-microcode: bump to 20200616

  + SECURITY UPDATE
    * For most processors: SRBDS and/or VRDS, L1DCES mitigations depending
      on the processor model
    * For Skylake HEDT and Skylake Xeons with signature 0x50654: VRDS and
      L1DCES mitigations, plus mitigations described earlier
    * Expect some performance impact, the mitigations are enabled by
      default.  A Linux kernel update will be issued that allows one to
      selectively disable the mitigations.

  + CRITICAL ERRATA FIXES
    * Implements mitigation for CVE-2020-0543 Special Register Buffer Data
      Sampling (SRBDS), INTEL-SA-00320, CROSSTalk
    * Implements mitigation for CVE-2020-0548 Vector Register Data Sampling
      (VRDS), INTEL-SA-00329
    * Implements mitigation for CVE-2020-0549 L1D Cache Eviction Sampling
      (L1DCES), INTEL-SA-00329
    * Known to fix the regression introduced in release 2019-11-12 (sig
      0x50564, rev. 0x2000065), which would cause several systems with
      Skylake Xeon, Skylake HEDT processors to hang while rebooting
    * Works around hangs on boot on Skylake-U/Y and Skylake Xeon E3

  + Updated Microcodes:
    sig 0x000206d6, pf_mask 0x6d, 2020-03-04, rev 0x0621, size 18432
    sig 0x000206d7, pf_mask 0x6d, 2020-03-24, rev 0x071a, size 19456
    sig 0x000306c3, pf_mask 0x32, 2019-11-12, rev 0x0028, size 23552
    sig 0x000306d4, pf_mask 0xc0, 2019-11-12, rev 0x002f, size 19456
    sig 0x00040651, pf_mask 0x72, 2019-11-12, rev 0x0026, size 22528
    sig 0x00040661, pf_mask 0x32, 2019-11-12, rev 0x001c, size 25600
    sig 0x00040671, pf_mask 0x22, 2019-11-12, rev 0x0022, size 14336
    sig 0x000406e3, pf_mask 0xc0, 2019-10-03, rev 0x00d6, size 101376
    sig 0x00050653, pf_mask 0x97, 2020-04-24, rev 0x1000157, size 32768
    sig 0x00050654, pf_mask 0xb7, 2020-04-24, rev 0x2006906, size 34816
    sig 0x00050656, pf_mask 0xbf, 2020-04-23, rev 0x4002f01, size 52224
    sig 0x00050657, pf_mask 0xbf, 2020-04-23, rev 0x5002f01, size 52224
    sig 0x000506e3, pf_mask 0x36, 2019-10-03, rev 0x00d6, size 101376
    sig 0x000706e5, pf_mask 0x80, 2020-03-12, rev 0x0078, size 107520
    sig 0x000806e9, pf_mask 0x10, 2020-04-27, rev 0x00d6, size 103424
    sig 0x000806e9, pf_mask 0xc0, 2020-04-27, rev 0x00d6, size 103424
    sig 0x000806ea, pf_mask 0xc0, 2020-04-27, rev 0x00d6, size 103424
    sig 0x000806eb, pf_mask 0xd0, 2020-04-27, rev 0x00d6, size 103424
    sig 0x000806ec, pf_mask 0x94, 2020-04-23, rev 0x00d6, size 103424
    sig 0x000906e9, pf_mask 0x2a, 2020-04-23, rev 0x00d6, size 103424
    sig 0x000906ea, pf_mask 0x22, 2020-04-27, rev 0x00d6, size 102400
    sig 0x000906eb, pf_mask 0x02, 2020-04-23, rev 0x00d6, size 103424
    sig 0x000906ec, pf_mask 0x22, 2020-04-27, rev 0x00d6, size 102400
    sig 0x000906ed, pf_mask 0x22, 2020-04-23, rev 0x00d6, size 103424
  * Likely fixes several critical errata on IceLake-U/Y causing system
    hangs

Signed-off-by: Zoltan HERPAI <[email protected]>

diff --git a/package/firmware/intel-microcode/Makefile b/package/firmware/intel-microcode/Makefile
index 1bda1bfa75457979c4690c5e22a43a5e71319568..b3c3674f8787b9f4bfbe373acd9c47e66ab74a36 100644 (file)
--- a/package/firmware/intel-microcode/Makefile
+++ b/package/firmware/intel-microcode/Makefile
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=intel-microcode
-PKG_VERSION:=20191115
-PKG_RELEASE:=2
+PKG_VERSION:=20200616
+PKG_RELEASE:=1
 
 PKG_SOURCE:=intel-microcode_3.$(PKG_VERSION).$(PKG_RELEASE).tar.xz
 PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/non-free/i/intel-microcode/
-PKG_HASH:=d86bbd3d3a49f392c7a0fa13611d4ffd17843f0f851c88921ac2003fe59712d8
+PKG_HASH:=bcc3b81c452fe4649a948c022475d76c1cdfbb730f36749a082f412f1406a3b9
 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-3.$(PKG_VERSION).$(PKG_RELEASE)
 
 PKG_BUILD_DEPENDS:=iucode-tool/host