iucode-tool (2.3.1-1build1) impish; urgency=medium
* No-change rebuild to build packages with zstd compression.
-- Matthias Klose <doko@ubuntu.com> Thu, 07 Oct 2021 12:13:17 +0200
iucode-tool (2.3.1-1) unstable; urgency=medium
* New upstream bugfix release:
+ iucode_tool: fix filter by revision parser on i686
-- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 05 Feb 2018 22:42:31 -0200
iucode-tool (2.3-1) unstable; urgency=medium
* New upstream release:
+ Support revision-based matching in microcode update filters
+ Support exact --scan-system as a runtime option (before, it was a
compile-time option and disabled in Debian builds)
-- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 28 Jan 2018 13:46:14 -0200
iucode-tool (2.2-1) unstable; urgency=medium
* New upstream release:
+ README: update for mixed dat and bin Intel releases
+ README: add an example of microcode with multiple sigs
+ iucode_tool: fix microcode count when selecting extended signatures
+ build tooling changes
* debian/docs: ship upstream NEWS file.
* debian/control: build-depend on newer automake.
Upstream now requires automake 1.13 or newer.
* debian/copyright: add licenses for m4/
* debian/copyright: use https for format URL
* debian/{watch,upstream/signing-key.asc}: support upstream signature checking
* debian/control: bump standards version to 4.1.0
-- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 28 Aug 2017 15:47:46 -0300
iucode-tool (2.1.2-2) unstable; urgency=medium
* Upload to unstable
-- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 18 Jun 2017 22:46:47 -0300
iucode-tool (2.1.2-1) experimental; urgency=medium
* New upstream release:
+ iucode_tool: compare payloads of similar (not just duplicate) MCUs
+ iucode_tool: skip small files as if empty in the -tr loader
* Target experimental due to the freeze for the Debian "stretch" release
-- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 15 Feb 2017 20:53:55 -0200
iucode-tool (2.1.1-1) unstable; urgency=high
* New upstream release:
+ Fix heap buffer overflow on -tr loader (CVE-2017-0357)
* debian/copyright: update for new upstream release
-- Henrique de Moraes Holschuh <hmh@debian.org> Fri, 13 Jan 2017 10:36:00 -0200
iucode-tool (2.1-1) unstable; urgency=medium
* New upstream release:
+ The early initramfs cpio archives created by iucode_tool are now
deterministic. Instead of the current system time, the date of
the latest microcode included in the early initramfs will be used.
+ There is a new option to minimize the size of the early initramfs:
--mini-earlyfw. This option causes iucode_tool to create a non-
standard cpio archive which is typically 736 bytes smaller.
WARNING: the microcode data file might not be visible to the
regular initramfs when this mode is used.
+ iucode-tool will now create valid early initramfs archives past
year 2038.
+ Change the strategy to add defensive padding to the early-initramfs
archive: add an empty directory entry to the cpio archive in order
to force the correct 16-byte alignment for the microcode data by
default. For --mini-earlyfs, keep the old strategy of appending
extra NULs to the end of the microcode data file name.
* debian/control: correct build-depends versioning of autoconf, automake.
Correct the minimum required versions of autoconf and automake, which
were bumped by upstream version 2.0.
* debian/compat, rules, control: modernize and enable full hardening
+ update debian/rules copyright date
+ switch to dh-based simplified debian/rules (debhelper v9)
+ opt-in to full hardening for PIE and bindnow
As a side-effect, we now fully honor DEB_*_STRIP, etc.
* debian/watch: add uscan watch file.
Add a debian/watch uscan version 3 watchfile to automatically check the
newest iucode-tool release tarball version, using the "latest" branch of
the iucode/releases gitlab project.
* debian/changelog: fix typos on older entires.
* debian/copyright: switch to DEP-5 format.
-- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 10 Nov 2016 23:27:52 -0200
iucode-tool (2.0-1) unstable; urgency=low
* New upstream release:
+ This new major version has several non-backwards-compatible
changes. Scripts that scrape iucode_tool's stdout/stderr messages
might have to be updated, and the behavior for -s and -S options
changed.
+ The microcode listing output format used by --list and
--list-all changed: the processor flags mask field is now
labeled "pf_mask" instead of "pf mask", and the first field
(bundle id/microcode id) is wider for --list-all, and completely
changed for --list (refer to next entry).
+ The output for the --list option now uses the same microcode
numbering used in --list-all and error messages, and also the
same indentation as --list-all. For this reason, --list will
output the bundle assignment list to stdout when not in --quiet
mode, the same way --list-all does.
+ The --scan-system/-S option can now only be specified once, and
it may be overridden by -s !<signature> options that come
+after* it in command line ordering. To emulate the previous
behavior, always specify --scan-system just once, and as the
last option (i.e. after any -s options).
+ Error and warning messages, as well as some verbose (and debug)
messages were updated, and some of them were demoted to higher
verbosity levels.
+ Other relevant changes since v1.6.1:
+ Microcodes are now sorted by signature (ascending) and processor
flags mask (descending). Before, microcodes with the same
signature but different processor flags mask had unspecified
ordering.
+ The .dat format loader was optimized to run a lot faster on
files that match the Intel layout exactly, and improved its
error detection.
+ iucode_tool now flushes output data files to permanent storage
using fdatasync() before closing them, to better detect write
errors. This causes a performance hit, but it is much safer.
+ Fix large file support (LFS) on 32-bit builds.
+ Abort with an error when attempting to write more than 4GiB to a
cpio (early initramfs) archive, due to a limitation of that cpio
file format.
-- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 12 Sep 2016 20:17:39 -0300
iucode-tool (1.6.1-1) unstable; urgency=medium
* New upstream release:
+ iucode_tool: append microcode bundles to linked list in O(1)
+ iucode_tool: stop allocating twice the required memory for a bundle
+ iucode_tool: don't close input files twice
load_intel_microcode() would cause fds to be closed twice. iucode_tool
is not multi-threaded and isn't otherwise affected by this bug, but
unfortunately there is a free() call between the first and second
close(). When running iucode_tool under some sort of malloc
instrumentation insane enough to open file descriptors on free()
inside the instrumented process' context, or indirectly linked to a
multi-threaded glibc module/plugin that could do the same, bad things
could happen.
+ iucode_tool(8): update Linux notes for up to v4.6
-- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 05 Jun 2016 17:50:41 -0300
# For older changelog entries, run 'apt-get changelog iucode-tool'
Generated by dwww version 1.14 on Sun Feb 2 14:10:32 CET 2025.