* New upstream microcode datafile 20190514
* SECURITY UPDATE
  Implements MDS mitigation (RIDL, Fallout, Zombieload), INTEL-SA-00223
  CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
* New Microcodes:
  sig 0x00030678, pf_mask 0x02, 2019-04-22, rev 0x0838, size 52224
  sig 0x00030678, pf_mask 0x0c, 2019-04-22, rev 0x0838, size 52224
  sig 0x00030679, pf_mask 0x0f, 2019-04-23, rev 0x090c, size 52224
  sig 0x000406c3, pf_mask 0x01, 2019-04-23, rev 0x0368, size 69632
  sig 0x000406c4, pf_mask 0x01, 2019-04-23, rev 0x0411, size 68608
  sig 0x00050657, pf_mask 0xbf, 2019-02-27, rev 0x5000021, size 47104
* Updated Microcodes:
  sig 0x000206a7, pf_mask 0x12, 2019-02-17, rev 0x002f, size 12288
  sig 0x000306a9, pf_mask 0x12, 2019-02-13, rev 0x0021, size 14336
  sig 0x000306c3, pf_mask 0x32, 2019-02-26, rev 0x0027, size 23552
  sig 0x000306d4, pf_mask 0xc0, 2019-03-07, rev 0x002d, size 19456
  sig 0x000306e4, pf_mask 0xed, 2019-03-14, rev 0x042e, size 16384
  sig 0x000306e7, pf_mask 0xed, 2019-03-14, rev 0x0715, size 17408
  sig 0x000306f2, pf_mask 0x6f, 2019-03-01, rev 0x0043, size 34816
  sig 0x000306f4, pf_mask 0x80, 2019-03-01, rev 0x0014, size 18432
  sig 0x00040651, pf_mask 0x72, 2019-02-26, rev 0x0025, size 21504
  sig 0x00040661, pf_mask 0x32, 2019-02-26, rev 0x001b, size 25600
  sig 0x00040671, pf_mask 0x22, 2019-03-07, rev 0x0020, size 14336
  sig 0x000406e3, pf_mask 0xc0, 2019-04-01, rev 0x00cc, size 100352
  sig 0x000406f1, pf_mask 0xef, 2019-03-02, rev 0xb000036, size 30720
  sig 0x00050654, pf_mask 0xb7, 2019-04-02, rev 0x200005e, size 32768
  sig 0x00050662, pf_mask 0x10, 2019-03-23, rev 0x001a, size 32768
  sig 0x00050663, pf_mask 0x10, 2019-03-23, rev 0x7000017, size 24576
  sig 0x00050664, pf_mask 0x10, 2019-03-23, rev 0xf000015, size 23552
  sig 0x00050665, pf_mask 0x10, 2019-03-23, rev 0xe00000d, size 19456
  sig 0x000506c9, pf_mask 0x03, 2019-01-15, rev 0x0038, size 17408
  sig 0x000506ca, pf_mask 0x03, 2019-03-01, rev 0x0016, size 15360
  sig 0x000506e3, pf_mask 0x36, 2019-04-01, rev 0x00cc, size 100352
  sig 0x000506f1, pf_mask 0x01, 2019-03-21, rev 0x002e, size 11264
  sig 0x000706a1, pf_mask 0x01, 2019-01-02, rev 0x002e, size 73728
  sig 0x000806e9, pf_mask 0x10, 2019-04-01, rev 0x00b4, size 98304
  sig 0x000806e9, pf_mask 0xc0, 2019-04-01, rev 0x00b4, size 99328
  sig 0x000806ea, pf_mask 0xc0, 2019-04-01, rev 0x00b4, size 99328
  sig 0x000806eb, pf_mask 0xd0, 2019-03-30, rev 0x00b8, size 98304
  sig 0x000806ec, pf_mask 0x94, 2019-03-30, rev 0x00b8, size 97280
  sig 0x000906e9, pf_mask 0x2a, 2019-04-01, rev 0x00b4, size 99328
  sig 0x000906ea, pf_mask 0x22, 2019-04-01, rev 0x00b4, size 98304
  sig 0x000906eb, pf_mask 0x02, 2019-04-01, rev 0x00b4, size 99328
  sig 0x000906ec, pf_mask 0x22, 2019-02-14, rev 0x00ae, size 98304
  sig 0x000906ed, pf_mask 0x22, 2019-03-17, rev 0x00b8, size 97280

* Implements MDS mitigation (RIDL, Fallout, Zombieload), INTEL-SA-00223
  CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
* New Microcodes:
  sig 0x00030678, pf_mask 0x02, 2019-04-22, rev 0x0838, size 52224
  sig 0x00030678, pf_mask 0x0c, 2019-04-22, rev 0x0838, size 52224
  sig 0x00030679, pf_mask 0x0f, 2019-04-23, rev 0x090c, size 52224
  sig 0x000406c3, pf_mask 0x01, 2019-04-23, rev 0x0368, size 69632
  sig 0x000406c4, pf_mask 0x01, 2019-04-23, rev 0x0411, size 68608
  sig 0x00050657, pf_mask 0xbf, 2019-02-27, rev 0x5000021, size 47104
* Updated Microcodes:
  sig 0x000206a7, pf_mask 0x12, 2019-02-17, rev 0x002f, size 12288
  sig 0x000306a9, pf_mask 0x12, 2019-02-13, rev 0x0021, size 14336
  sig 0x000306c3, pf_mask 0x32, 2019-02-26, rev 0x0027, size 23552
  sig 0x000306d4, pf_mask 0xc0, 2019-03-07, rev 0x002d, size 19456
  sig 0x000306e4, pf_mask 0xed, 2019-03-14, rev 0x042e, size 16384
  sig 0x000306e7, pf_mask 0xed, 2019-03-14, rev 0x0715, size 17408
  sig 0x000306f2, pf_mask 0x6f, 2019-03-01, rev 0x0043, size 34816
  sig 0x000306f4, pf_mask 0x80, 2019-03-01, rev 0x0014, size 18432
  sig 0x00040651, pf_mask 0x72, 2019-02-26, rev 0x0025, size 21504
  sig 0x00040661, pf_mask 0x32, 2019-02-26, rev 0x001b, size 25600
  sig 0x00040671, pf_mask 0x22, 2019-03-07, rev 0x0020, size 14336
  sig 0x000406e3, pf_mask 0xc0, 2019-04-01, rev 0x00cc, size 100352
  sig 0x000406f1, pf_mask 0xef, 2019-03-02, rev 0xb000036, size 30720
  sig 0x00050654, pf_mask 0xb7, 2019-04-02, rev 0x200005e, size 32768
  sig 0x00050662, pf_mask 0x10, 2019-03-23, rev 0x001a, size 32768
  sig 0x00050663, pf_mask 0x10, 2019-03-23, rev 0x7000017, size 24576
  sig 0x00050664, pf_mask 0x10, 2019-03-23, rev 0xf000015, size 23552
  sig 0x00050665, pf_mask 0x10, 2019-03-23, rev 0xe00000d, size 19456
  sig 0x000506c9, pf_mask 0x03, 2019-01-15, rev 0x0038, size 17408
  sig 0x000506ca, pf_mask 0x03, 2019-03-01, rev 0x0016, size 15360
  sig 0x000506e3, pf_mask 0x36, 2019-04-01, rev 0x00cc, size 100352
  sig 0x000506f1, pf_mask 0x01, 2019-03-21, rev 0x002e, size 11264
  sig 0x000706a1, pf_mask 0x01, 2019-01-02, rev 0x002e, size 73728
  sig 0x000806e9, pf_mask 0x10, 2019-04-01, rev 0x00b4, size 98304
  sig 0x000806e9, pf_mask 0xc0, 2019-04-01, rev 0x00b4, size 99328
  sig 0x000806ea, pf_mask 0xc0, 2019-04-01, rev 0x00b4, size 99328
  sig 0x000806eb, pf_mask 0xd0, 2019-03-30, rev 0x00b8, size 98304
  sig 0x000806ec, pf_mask 0x94, 2019-03-30, rev 0x00b8, size 97280
  sig 0x000906e9, pf_mask 0x2a, 2019-04-01, rev 0x00b4, size 99328
  sig 0x000906ea, pf_mask 0x22, 2019-04-01, rev 0x00b4, size 98304
  sig 0x000906eb, pf_mask 0x02, 2019-04-01, rev 0x00b4, size 99328
  sig 0x000906ec, pf_mask 0x22, 2019-02-14, rev 0x00ae, size 98304
  sig 0x000906ed, pf_mask 0x22, 2019-03-17, rev 0x00b8, size 97280

* New upstream microcode datafile 20190312
  + Removed Microcodes:
    sig 0x00050653, pf_mask 0x97, 2018-01-29, rev 0x1000140, size 30720
  + New Microcodes:
    sig 0x000806e9, pf_mask 0x10, 2018-10-18, rev 0x009e, size 98304
    sig 0x000806eb, pf_mask 0xd0, 2018-10-25, rev 0x00a4, size 99328
    sig 0x000806ec, pf_mask 0x94, 2019-02-12, rev 0x00b2, size 98304
    sig 0x000906ec, pf_mask 0x22, 2018-09-29, rev 0x00a2, size 98304
    sig 0x000906ed, pf_mask 0x22, 2019-02-04, rev 0x00b0, size 97280
  + Updated Microcodes:
    sig 0x000306f2, pf_mask 0x6f, 2018-11-20, rev 0x0041, size 34816
    sig 0x000306f4, pf_mask 0x80, 2018-11-06, rev 0x0013, size 17408
    sig 0x00050654, pf_mask 0xb7, 2019-01-28, rev 0x200005a, size 33792
    sig 0x00050662, pf_mask 0x10, 2018-12-06, rev 0x0019, size 32768
    sig 0x00050663, pf_mask 0x10, 2018-12-06, rev 0x7000016, size 23552
    sig 0x00050664, pf_mask 0x10, 2018-11-17, rev 0xf000014, size 23552
    sig 0x00050665, pf_mask 0x10, 2018-11-17, rev 0xe00000c, size 19456
    sig 0x000506c9, pf_mask 0x03, 2018-09-14, rev 0x0036, size 17408
    sig 0x000506ca, pf_mask 0x03, 2018-09-20, rev 0x0010, size 15360
    sig 0x000706a1, pf_mask 0x01, 2018-09-21, rev 0x002c, size 73728
    sig 0x000806e9, pf_mask 0xc0, 2018-07-16, rev 0x009a, size 98304
    sig 0x000806ea, pf_mask 0xc0, 2018-10-18, rev 0x009e, size 98304
    sig 0x000906e9, pf_mask 0x2a, 2018-07-16, rev 0x009a, size 98304
    sig 0x000906ea, pf_mask 0x22, 2018-12-12, rev 0x00aa, size 98304
    sig 0x000906eb, pf_mask 0x02, 2018-12-12, rev 0x00aa, size 99328

2019-03-12:
  * Removed Microcodes:
    sig 0x00050653, pf_mask 0x97, 2018-01-29, rev 0x1000140, size 30720
  * New Microcodes:
    sig 0x000806e9, pf_mask 0x10, 2018-10-18, rev 0x009e, size 98304
    sig 0x000806eb, pf_mask 0xd0, 2018-10-25, rev 0x00a4, size 99328
    sig 0x000806ec, pf_mask 0x94, 2019-02-12, rev 0x00b2, size 98304
    sig 0x000906ec, pf_mask 0x22, 2018-09-29, rev 0x00a2, size 98304
    sig 0x000906ed, pf_mask 0x22, 2019-02-04, rev 0x00b0, size 97280
  * Updated Microcodes:
    sig 0x000306f2, pf_mask 0x6f, 2018-11-20, rev 0x0041, size 34816
    sig 0x000306f4, pf_mask 0x80, 2018-11-06, rev 0x0013, size 17408
    sig 0x00050654, pf_mask 0xb7, 2019-01-28, rev 0x200005a, size 33792
    sig 0x00050662, pf_mask 0x10, 2018-12-06, rev 0x0019, size 32768
    sig 0x00050663, pf_mask 0x10, 2018-12-06, rev 0x7000016, size 23552
    sig 0x00050664, pf_mask 0x10, 2018-11-17, rev 0xf000014, size 23552
    sig 0x00050665, pf_mask 0x10, 2018-11-17, rev 0xe00000c, size 19456
    sig 0x000506c9, pf_mask 0x03, 2018-09-14, rev 0x0036, size 17408
    sig 0x000506ca, pf_mask 0x03, 2018-09-20, rev 0x0010, size 15360
    sig 0x000706a1, pf_mask 0x01, 2018-09-21, rev 0x002c, size 73728
    sig 0x000806e9, pf_mask 0xc0, 2018-07-16, rev 0x009a, size 98304
    sig 0x000806ea, pf_mask 0xc0, 2018-10-18, rev 0x009e, size 98304
    sig 0x000906e9, pf_mask 0x2a, 2018-07-16, rev 0x009a, size 98304
    sig 0x000906ea, pf_mask 0x22, 2018-12-12, rev 0x00aa, size 98304
    sig 0x000906eb, pf_mask 0x02, 2018-12-12, rev 0x00aa, size 99328

Switch to a new upstream master branch at:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files.git

* Makefile: unblacklist 0x206c2 (Westmere EP)
  According to pragyansri.pathi@intel.com, on message to LP#1795594
  on 2018-10-09, we can ship 0x206c2 updates without restrictions.
  Also, there are no reports in the field about this update causing
  issues (closes: #907402) (LP: #1795594)

According to pragyansri.pathi@intel.com, on message to LP#1795594
on 2018-10-09:

   Confirmed information from microcode team:
   206F2 – Westmere-EX Rev 0x3B shows as OK for OS load. The prior one
           marked as Production was 0x39 and mark as NOT_FOR_OS.
   206C2 – Westmere-EP Rev 0x1F and 0x1E shows as OK for OS load and the
           prior production revision 0x1D is marked as NOT_FOR_OS.

(https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/1795594)

So, as per Intel explicit directions above, and also based on the fact
that they have been distributing the 0x206c2 update to rev. 0x1f to
everybody and there were no reports about it causing problems so far for
a month now on any of the other distros (which did distribute the
0x206c2 update widely), I am removing the blacklisting for 0x206c2.

The blacklisting was based on the wording of Intel advisory SA-00030,
the details can be found on Debian bug report #907402.

Closes: #907402
Closes: LP#1795594

[ Henrique de Moraes Holschuh ]
* New upstream microcode datafile 20180807a
  (closes: #906158, #906160, #903135, #903141)
  + New Microcodes:
    sig 0x000206c2, pf_mask 0x03, 2018-05-08, rev 0x001f, size 11264
    sig 0x000206e6, pf_mask 0x04, 2018-05-15, rev 0x000d, size 9216
    sig 0x000506c2, pf_mask 0x01, 2018-05-11, rev 0x0014, size 15360
    sig 0x000506ca, pf_mask 0x03, 2018-05-11, rev 0x000c, size 14336
    sig 0x000506f1, pf_mask 0x01, 2018-05-11, rev 0x0024, size 10240
  + Updated Microcodes:
    sig 0x000106a5, pf_mask 0x03, 2018-05-11, rev 0x001d, size 12288
    sig 0x000106e5, pf_mask 0x13, 2018-05-08, rev 0x000a, size 9216
    sig 0x00020652, pf_mask 0x12, 2018-05-08, rev 0x0011, size 9216
    sig 0x00020655, pf_mask 0x92, 2018-04-23, rev 0x0007, size 4096
    sig 0x000206a7, pf_mask 0x12, 2018-04-10, rev 0x002e, size 12288
    sig 0x000206f2, pf_mask 0x05, 2018-05-16, rev 0x003b, size 14336
    sig 0x000306a9, pf_mask 0x12, 2018-04-10, rev 0x0020, size 13312
    sig 0x000306c3, pf_mask 0x32, 2018-04-02, rev 0x0025, size 23552
    sig 0x000306d4, pf_mask 0xc0, 2018-03-22, rev 0x002b, size 18432
    sig 0x00040651, pf_mask 0x72, 2018-04-02, rev 0x0024, size 22528
    sig 0x00040661, pf_mask 0x32, 2018-04-02, rev 0x001a, size 25600
    sig 0x00040671, pf_mask 0x22, 2018-04-03, rev 0x001e, size 13312
    sig 0x000406e3, pf_mask 0xc0, 2018-04-17, rev 0x00c6, size 99328
    sig 0x00050662, pf_mask 0x10, 2018-05-25, rev 0x0017, size 31744
    sig 0x00050663, pf_mask 0x10, 2018-04-20, rev 0x7000013, size 22528
    sig 0x00050664, pf_mask 0x10, 2018-04-20, rev 0xf000012, size 22528
    sig 0x000506c9, pf_mask 0x03, 2018-05-11, rev 0x0032, size 16384
    sig 0x000506e3, pf_mask 0x36, 2018-04-17, rev 0x00c6, size 99328
    sig 0x000706a1, pf_mask 0x01, 2018-05-22, rev 0x0028, size 73728
    sig 0x000806e9, pf_mask 0xc0, 2018-03-24, rev 0x008e, size 98304
    sig 0x000806ea, pf_mask 0xc0, 2018-05-15, rev 0x0096, size 98304
    sig 0x000906e9, pf_mask 0x2a, 2018-03-24, rev 0x008e, size 98304
    sig 0x000906ea, pf_mask 0x22, 2018-05-02, rev 0x0096, size 97280
    sig 0x000906eb, pf_mask 0x02, 2018-03-24, rev 0x008e, size 98304
  + Implements L1D_FLUSH support (L1TF "Foreshadow/-NG" mitigation)
    Intel SA-00161, CVE-2018-3615, CVE-2018-3620, CVE-2018-3646
  + Implements SSBD support (Spectre v4 mitigation),
    Disable speculation for (some) RDMSR/WRMSR (Spectre v3a fix)
    Intel SA-00115, CVE-2018-3639, CVE-2018-3640
  + Implements IBRS/IBPB/STIPB support, Spectre v2 mitigation for older
    processors with signatures 0x106a5, 0x106e5, 0x20652, 0x20655.
    Intel SA-0088, CVE-2017-5753, CVE-2017-5754
* source: update symlinks to reflect id of the latest release, 20180807a
* debian/intel-microcode.docs: ship license and releasenote upstream files.
* debian/changelog: update entry for 3.20180703.1 with L1TF information

[ Julian Andres Klode ]
* initramfs: include all microcode for MODULES=most.
  Default to early instead of auto, and install all of the microcode,
  not just the one matching the current CPU, if MODULES=most is set
  in the initramfs-tools config (LP: #1778738)

Include the license file on the end-user documentation for the package
(it was already present in the copyright file, but this allows us to
have it verbatim).

Include the releasenote file from upstream too, since nowadays it has
useful information.

The new upstream license is the same as the one previously used on the
older .dat files, with new text formatting, and copyright dates updated
to 2018.

2018-08-07, 2018-08-07a:
  * Implements L1D_FLUSH support, L1TF "Foreshadow/-NG" mitigation
  * Implements SSBD support, Spectre v4 mitigation
  * Disable speculation for (some) RDMSR/WRMSR, Spectre v3a fix
  * Implements IBRS/IBPB/STIPB support, Spectre v2 mitigation for
    sigs 0x106a5, 0x106e5, 0x20652, 0x20655
  * New Microcodes:
    sig 0x000206c2, pf_mask 0x03, 2018-05-08, rev 0x001f, size 11264
    sig 0x000206e6, pf_mask 0x04, 2018-05-15, rev 0x000d, size 9216
    sig 0x000506c2, pf_mask 0x01, 2018-05-11, rev 0x0014, size 15360
    sig 0x000506ca, pf_mask 0x03, 2018-05-11, rev 0x000c, size 14336
    sig 0x000506f1, pf_mask 0x01, 2018-05-11, rev 0x0024, size 10240
  * Updated Microcodes:
    sig 0x000106a5, pf_mask 0x03, 2018-05-11, rev 0x001d, size 12288
    sig 0x000106e5, pf_mask 0x13, 2018-05-08, rev 0x000a, size 9216
    sig 0x00020652, pf_mask 0x12, 2018-05-08, rev 0x0011, size 9216
    sig 0x00020655, pf_mask 0x92, 2018-04-23, rev 0x0007, size 4096
    sig 0x000206a7, pf_mask 0x12, 2018-04-10, rev 0x002e, size 12288
    sig 0x000206f2, pf_mask 0x05, 2018-05-16, rev 0x003b, size 14336
    sig 0x000306a9, pf_mask 0x12, 2018-04-10, rev 0x0020, size 13312
    sig 0x000306c3, pf_mask 0x32, 2018-04-02, rev 0x0025, size 23552
    sig 0x000306d4, pf_mask 0xc0, 2018-03-22, rev 0x002b, size 18432
    sig 0x00040651, pf_mask 0x72, 2018-04-02, rev 0x0024, size 22528
    sig 0x00040661, pf_mask 0x32, 2018-04-02, rev 0x001a, size 25600
    sig 0x00040671, pf_mask 0x22, 2018-04-03, rev 0x001e, size 13312
    sig 0x000406e3, pf_mask 0xc0, 2018-04-17, rev 0x00c6, size 99328
    sig 0x00050662, pf_mask 0x10, 2018-05-25, rev 0x0017, size 31744
    sig 0x00050663, pf_mask 0x10, 2018-04-20, rev 0x7000013, size 22528
    sig 0x00050664, pf_mask 0x10, 2018-04-20, rev 0xf000012, size 22528
    sig 0x000506c9, pf_mask 0x03, 2018-05-11, rev 0x0032, size 16384
    sig 0x000506e3, pf_mask 0x36, 2018-04-17, rev 0x00c6, size 99328
    sig 0x000706a1, pf_mask 0x01, 2018-05-22, rev 0x0028, size 73728
    sig 0x000806e9, pf_mask 0xc0, 2018-03-24, rev 0x008e, size 98304
    sig 0x000806ea, pf_mask 0xc0, 2018-05-15, rev 0x0096, size 98304
    sig 0x000906e9, pf_mask 0x2a, 2018-03-24, rev 0x008e, size 98304
    sig 0x000906ea, pf_mask 0x22, 2018-05-02, rev 0x0096, size 97280
    sig 0x000906eb, pf_mask 0x02, 2018-03-24, rev 0x008e, size 98304

2018-07-03:
  * Implements L1D_FLUSH support, L1TF "Foreshadow/-NG" mitigation
  ...

intel-microcode Debian release 3.20180703.2

Julian Andres Klode authored Jul 29, 2018 and Henrique de Moraes Holschuh committed Jul 29, 2018

Default to early instead of auto, and install all of the microcode,
not just the one matching the current CPU, if MODULES=most is set
in the initramfs-tools config (LP: #1778738)

* source: fix badly named symlink that resulted in most microcode
  updates not being shipped in the binary package.  Oops!