[Lvfs-announce] Microcode checks on UEFI firmware

Richard Hughes <[email protected]> Wed, 5 Feb 2020 16:52:11 +0000
Newsgroups dev.linux.lists.lvfs-announce
Message-ID <CAD2FfiFU+ZF-kL+Tfxx-CHxHu6vLHeSGW5sWN=P=HC8qENyHjQ@mail.gmail.com>
Hi all,

The LVFS now checks processor microcode versions for uploaded
firmware. We only compare the versions with other firmware _of the
same vendor_ in testing or stable. If the microcode has been
downgraded then the new test will fail, although the failure can be
waived by a QA user as I appreciate that *sometimes* it's not an
accident, and the downgrade is the right thing to do. Of ~450 firmware
files scanned just 9 issues were found, and all were older versions
than the most current. This message is more a FYI for the future :)

There are some more details and a screenshot here:
https://lvfs.readthedocs.io/en/latest/testing.html#microcode -- I'm
happy to answer questions offlist.

Richard.