Commit Graph

69 Commits

Author SHA1 Message Date
Naveen Saini
bab936cb4a intel-microcode: upgrade 20231114 -> 20240312
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240312

Fixes CVEs:
CVE-2023-39368 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html]
CVE-2023-38575 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html]
CVE-2023-28746 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html]
CVE-2023-22655 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html]
CVE-2023-43490 [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01045.html]

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2024-03-29 16:51:10 +08:00
Anuj Mittal
7b5fa1dd12 intel-microcode: upgrade 20230808 -> 20231114
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20231114

Fixes CVE-2023-23583. Details:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2023-11-22 15:36:06 +08:00
Anuj Mittal
e482213f37 intel-microcode: upgrade 20230512 -> 20230808
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20230808

Also fixes CVE-2022-40982, CVE-2023-23908 and CVE-2022-41804.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2023-08-10 13:00:09 +08:00
Anuj Mittal
5c94dbcea1 intel-microcode: upgrade 20230214 -> 20230512
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20230512

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2023-08-10 13:00:05 +08:00
Uwe Geuder
488af577a3 zlib: Clarify fix of CVE-2022-37434
The previous fix added a patch that

  * was incomplete
  * was not even used in probably most builds because the zlib recipe
    in openembedded / poky contains a file with the same name.

Remove the incomplete patch in order to make it clear that the complete
patch from openembedded / poky is used.

Fixes: e64954db ("zlib: fix CVE-2022-37434")
Signed-off-by: Uwe Geuder <uwe.geuder+yocto@neuroeventlabs.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2023-04-27 11:26:50 +08:00
Naveen Saini
da90da046b intel-microcode: upgrade 20221108 -> 20230214
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20230214

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2023-02-20 10:30:51 +08:00
Anuj Mittal
6c20229192 intel-microcode: upgrade 20220809 -> 20221108
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20221108

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
(cherry picked from commit 369956751a)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2022-11-15 13:06:20 +08:00
Chee Yang Lee
e64954db59 zlib: fix CVE-2022-37434
Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2022-08-18 11:29:40 +08:00
Anuj Mittal
98709728a6 intel-microcode: upgrade 20220510 -> 20220809
Fixes CVE-2022-21233.

Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220809

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2022-08-12 11:39:38 +08:00
Yongxin Liu
b140206b95 intel-microcode: update SRCREV for 20220510
The commit 6c0c4691e5bb446e0e428ebca595164709c59586 is missing in upstream
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files.

Reference:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/62.

Use 925555515555 instead of 6c0c4691e5bb. The difference between those
two commits are just some "^M" fixes in releasenote.md.

Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2022-08-11 10:47:37 +08:00
Ovidiu Panait
b7b463a247 intel-microcode: upgrade 20220419 -> 20220510
intel-microcode-20220510 includes fixes for CVE-2021-33117 and CVE-2022-21151.

CVE-2021-33117:
A potential security vulnerability in some 3rd Generation Intel® Xeon® Scalable
Processors may allow information disclosure. Intel is releasing firmware
updates to mitigate this potential vulnerability.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00586.html

CVE-2022-21151:
A potential security vulnerability in some Intel® Processors may allow
information disclosure. Intel is releasing firmware updates to mitigate this
potential vulnerability.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
(cherry picked from commit e26d271f11)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2022-06-08 11:03:15 +08:00
Naveen Saini
4b14348fa9 intel-microcode: upgrade 20220207 -> 20220419
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
(cherry picked from commit 6c9d750d7d)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2022-06-08 11:03:01 +08:00
Chee Yang Lee
affda10724 zlib: fix CVE-2018-25032
CVE-2018-25032 fixes at oe-core causing fuzz and build error,
backport the patch with fuzz fixed and another patch to fix build error.

Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2022-04-20 10:59:42 +08:00
Chee Yang Lee
552d4bdf43 zlib: override SRC_URI
also add explicit branch and change protocol to https

Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2022-04-04 10:45:12 +08:00
Anuj Mittal
8781f8352e intel-microcode: upgrade 20210608 -> 20220207
Also fixes CVE-2021-0146, CVE-2021-0127. More details:

https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220207

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2022-03-03 14:22:01 +08:00
Anuj Mittal
58c5907ffd intel-microcode: upgrade 20210216 -> 20210608
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20210608

Fixes CVE-2021-24489, CVE-2020-24511, CVE-2020-24512, CVE-2020-24513.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-06-22 08:49:49 +08:00
Anuj Mittal
4bd62a7e15 intel-microcode: fix the license md5sum
The upgrade was pushed without the correct license md5sum. Fix it now.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-02-19 15:01:49 +08:00
Anuj Mittal
184f9b798e intel-microcode: upgrade 20201118 -> 20210216
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20210216

Fixes CVE-2020-8698, CVE-2020-8696

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2021-02-19 15:01:49 +08:00
Anuj Mittal
541c7256c1 intel-microcode: upgrade 20201112 -> 20201118
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20201118

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
(cherry picked from commit 6cf386fa94)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-11-21 14:59:25 +08:00
Anuj Mittal
ee1e742993 intel-microcode: upgrade 20201110 -> 20201112
Updates microcode for one more platform:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20201112

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
(cherry picked from commit bd5c27bae3)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-11-21 14:59:17 +08:00
Anuj Mittal
d3be47770b intel-microcode: upgrade 20200616 -> 20201110
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20201110

Fixes: CVE-2020-8696 CVE-2020-8698 CVE-2020-8695 CVE-2020-8694

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
(cherry picked from commit b8ca20b337)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-11-21 14:59:11 +08:00
Anuj Mittal
120eea3848 intel-microcode: change branch name master -> main
Upstream has made 'main' the default branch so make the branch name
explicit.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-10-28 10:39:59 +08:00
Anuj Mittal
06be24dd0e intel-microcode: upgrade 20200609 -> 20200616
Release notes:
0e4288f81f/releasenote

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-06-17 23:45:51 +08:00
Anuj Mittal
4cf511565a intel-microcode: upgrade 20200520 -> 20200609
Release notes:
021c295269/releasenote

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-06-10 08:10:58 +08:00
Anuj Mittal
c7b480b9ef intel-microcode: upgrade 20200508 -> 20200520
Release notes:
437f382b1b/releasenote

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-05-27 17:35:49 +08:00
Anuj Mittal
272b5c024a intel-microcode: upgrade 20191115 -> 20200508
Release notes:
d6e1db6755/releasenote

License-Update: Change in Copyright year

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-05-27 17:35:43 +08:00
Anuj Mittal
4162501e85 mkl-dnn: upgrade 1.2.2 -> 1.4
The name of project has changed to oneDNN. Enable GPU engine to be built
by default which would need clang layer to be included.

Also include two minor fixes to install logic that have been submitted
for review upstream.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-04-21 22:07:37 +08:00
Naveen Saini
544e3d33f2 mkl-dnn: upgrade 1.2 -> 1.2.2
Release notes:
https://github.com/intel/mkl-dnn/releases/tag/v1.2.2

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-04-04 18:22:52 +08:00
Yeoh Ee Peng
ee09a28adb recipe-core/libxcam: Enable test package
Enable test package:
 - include libxcam sample apps

Signed-off-by: Yeoh Ee Peng <ee.peng.yeoh@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-04-02 00:09:06 +08:00
Naveen Saini
ae4221d52d mkl-dnn: upgrade v1.1.1 -> v1.2
Added full text of third party licenses and copyright
notices to LICENSE
88d4573ed5

Release notes can be found here:
https://github.com/intel/mkl-dnn/releases/tag/v1.2

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-02-07 17:05:48 +08:00
Naveen Saini
d824afa110 mkl-dnn: upgrade v1.1 -> v1.1.1
Release notes can be found here:
https://github.com/intel/mkl-dnn/releases/tag/v1.1.1

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-12-11 13:47:57 +08:00
Anuj Mittal
df2c8eefb2 intel-microcode: upgrade 20191112 -> 20191115
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20191115

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-11-18 07:52:17 +08:00
Anuj Mittal
951fb4b4ba intel-microcode: upgrade 20190918 -> 20191112
For changes in this release, see:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20191112

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-11-13 07:41:17 +08:00
Ross Burton
2c70bc31ea mkl-dnn: set CVE_PRODUCT
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-11-13 06:02:59 +08:00
Naveen Saini
62ac7ad874 libxcam: upgrade 1.2.2 -> 1.3.0
Patch is already merged, so not required anymore.

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-10-21 07:18:55 +08:00
Naveen Saini
dd9437e9be mkl-dnn: upgrade v1.0.2 -> v1.1
Added third party license info:

   CMake, 3-clause BSD licenseq
   Copyright 2000-2019 Kitware, Inc. and Contributors
   See full license text in cmake/Copyright.txt

   MathJax, Apache License 2.0
   Copyright (c) 2009-2018 The MathJax Consortium
   See full license text in doc/assets/mathjax/LICENSE

   Boost C++ Libraries, Boost Software License, Version 1.0
   Copyright 2005-2014 Daniel James.
   See full license text in src/common/LICENSE_1_0

Release highlights can be found here:
https://github.com/intel/mkl-dnn/releases/tag/v1.1

Note:
Starting with this release (version 1.1) the library is renamed to DNNL
https://intel.github.io/mkl-dnn/dev_guide_transition_to_dnnl.html
https://intel.github.io/mkl-dnn/dev_guide_transition_to_v1.html

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-10-21 07:18:55 +08:00
Anuj Mittal
125c05dd42 intel-microcode: upgrade 20190618 -> 20190918
Release notes:
5ada2f32ed/releasenote

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-09-21 09:17:27 +08:00
Naveen Saini
2656d21e2f mkl-dnn: upgrade v1.0.1 -> v1.0.2
Release highlights can be found here:
https://github.com/intel/mkl-dnn/releases/tag/v1.0.2

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-09-04 07:37:42 +08:00
Anuj Mittal
50721b67a9 ovmf: refresh patch
Refresh patch as per the latest version in OE-Core. Move the key as per:

a79b115ade

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-08-13 22:11:49 +08:00
Anuj Mittal
f4f248406d zlib-intel: use '.' instead of '_' in PV
Otherwise everything after underscore either gets ignored (in case of
devtool)  or converted to a hyphen. This ensures that the version is
handled more consistently.

Also add a custom GITTAGREGEX check to check for upstream releases.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-08-10 21:23:47 +08:00
Naveen Saini
fae140eb19 mkl-dnn: upgrade v0.19 -> v1.0.1
Added third party license info:
"ittnotify, 3-clause BSD license
Copyright (c) 2011, Intel Corporation
See full copyright notice and license text in
src/cpu/jit_utils/jitprofiling/LICENSE.BSD"

Release highlights can be found here:
https://github.com/intel/mkl-dnn/releases/tag/v1.0

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-08-06 11:10:44 +08:00
Anuj Mittal
3b5236690c libxcam: set proper version for recipe
Since this fetches a release version, set PV accordingly.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-08-01 09:40:13 +08:00
Ankit Navik
e3d7b3aba6 libxcam: Initial recipe for libXCam
It adds generic recipe for libXCam for extended camera feature, but not limited
in camera. It focuses on image quality improvement and video analysis.

Signed-off-by: Ankit Navik <ankit.tarot@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-07-30 12:41:53 +08:00
Anuj Mittal
2bf939d17f intel-microcode: fix upstream check
There could be zero or more characaters at the end of version string.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-07-04 17:39:29 +08:00
Naveen Saini
41967144c4 mkl-dnn: add ptest
Added api-c & test_c_symbols testcases under ptest.

Shipping benchdnn, which is a standalone correctness and performance
benchmark for Intel(R) Math Kernel Library for Deep
Neural Networks (Intel(R) MKL-DNN).

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-07-04 10:17:36 +08:00
Yong, Jonathan
cba66dfb7b intel-microcode: fix microcode loading on newer kernels
The /dev/microcode interface and microcode-ctl utility has
been deprecated in favor of the new kernel
/sys/devices/system/cpu/microcode/reload interface as documented in:
https://github.com/torvalds/linux/blob/master/Documentation/x86/microcode.rst

It expects the microcode binaries to be split out and loaded from
/lib/firmware, eg:
/lib/firmware/intel-ucode/06-01-01
/lib/firmware/intel-ucode/06-01-02
/lib/firmware/intel-ucode/06-01-06
/lib/firmware/intel-ucode/06-01-07
/lib/firmware/intel-ucode/06-01-09
...

This change does not affect the earlyfw cpio generated by inte-ucode.

Signed-off-by: Yong, Jonathan <jonathan.yong@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-07-04 10:16:09 +08:00
Naveen Saini
16d24415ed mkl-dnn: do not use host machine instructions
For GNU* Compiler Collection version 5 and newer
the default options are `-march=native -mtune=native`,
which should not happen in cross compilation environment.

ARCH_OPT_FLAGS=\"\" does not allow to use host machine
instructions.

For more information, please check:
http://intel.github.io/mkl-dnn/dev_guide_build_options.html

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-07-01 10:15:20 +08:00
Anuj Mittal
2e47b48e5d intel-microcode: upgrade 20190514a -> 20190618
For changes in this version, see:

940d904b72/releasenote

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-06-19 19:53:43 +08:00
Naveen Saini
c941d896c0 mkl-dnn: update SRCREV to fix GCC9 build failure
Fix for GCC9 build error is backported from master
branch to release branch rls-v0.19.

Patch Link:
027de76036

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-06-07 11:02:18 +08:00
Naveen Saini
a5c617ea99 mkl-dnn: upgrade 0.18.1 -> 0.19
For more details, please check:
https://github.com/intel/mkl-dnn/releases

Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2019-06-01 16:00:44 +08:00