[ubuntu/questing-proposed] amd64-microcode 3.20250311.1ubuntu1 (Accepted)

[Marc Deslauriers]

amd64-microcode (3.20250311.1ubuntu1) questing; urgency=medium

  * Merge from Debian Unstable. Remaining changes:
    - initramfs-tools hook (debian/initramfs.hook):
      + Default to 'early' instead of 'auto' when building with
        MODULES=most
      + Do not override preset defaults from auto-exported conf
        snippets loaded by initramfs-tools.

amd64-microcode (3.20250311.1) unstable; urgency=medium

  * Update package data from linux-firmware 20250311
  * New AMD-SEV firmware from AMD upstream (20250221)
    * SECURITY UPDATE (AMD-SB-3019 / CVE-2024-56161):
      Update remote attestation to be compatible with AMD systems with
      up-to-date firmware (i.e. which fixes "EntrySign"), and update
      AMD-SEV for AMD-SB-3019 mitigations.  Note that this AMD-SEV
      update DOES NOT FIX the microcode "EntrySign" vulnerability.
      (closes: #1095470)
    + Updated SEV firmware:
        Family 17h models 30h-3fh: version 0.24 build 20
        Family 19h models 00h-0fh: version 1.55 build 29
        Family 19h models 10h-1fh: version 1.55 build 39
        Family 19h models a0h-afh: version 1.55 build 39
      + New SEV firmware:
        Family 1ah models 00h-0fh: version 1.55 build 54
  * New AMD microcode updates from AMD upstream (20241121)
    + Add patches for many (non-server) family 19h processors
    * Updated Microcode patches:
      + Family=0x17 Model=0xa0 Stepping=0x00: Patch=0x08a0000a
    * New Microcode patches:
      + Family=0x17 Model=0x60 Stepping=0x01: Patch=0x0860010d
      + Family=0x17 Model=0x68 Stepping=0x01: Patch=0x08608108
      + Family=0x17 Model=0x71 Stepping=0x00: Patch=0x08701034
      + Family=0x19 Model=0x08 Stepping=0x02: Patch=0x0a00820c
      + Family=0x19 Model=0x18 Stepping=0x01: Patch=0x0a108108
      + Family=0x19 Model=0x21 Stepping=0x00: Patch=0x0a20102d
      + Family=0x19 Model=0x21 Stepping=0x02: Patch=0x0a201210
      + Family=0x19 Model=0x44 Stepping=0x01: Patch=0x0a404107
      + Family=0x19 Model=0x50 Stepping=0x00: Patch=0x0a500011
      + Family=0x19 Model=0x61 Stepping=0x02: Patch=0x0a601209
      + Family=0x19 Model=0x74 Stepping=0x01: Patch=0x0a704107
      + Family=0x19 Model=0x75 Stepping=0x02: Patch=0x0a705206
      + Family=0x19 Model=0x78 Stepping=0x00: Patch=0x0a708007
      + Family=0x19 Model=0x7c Stepping=0x00: Patch=0x0a70c005

Date: Thu, 22 May 2025 13:11:30 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/amd64-microcode/3.20250311.1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 22 May 2025 13:11:30 -0400
Source: amd64-microcode
Built-For-Profiles: noudeb
Architecture: source
Version: 3.20250311.1ubuntu1
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Closes: 1095470
Changes:
 amd64-microcode (3.20250311.1ubuntu1) questing; urgency=medium
 .
   * Merge from Debian Unstable. Remaining changes:
     - initramfs-tools hook (debian/initramfs.hook):
       + Default to 'early' instead of 'auto' when building with
         MODULES=most
       + Do not override preset defaults from auto-exported conf
         snippets loaded by initramfs-tools.
 .
 amd64-microcode (3.20250311.1) unstable; urgency=medium
 .
   * Update package data from linux-firmware 20250311
   * New AMD-SEV firmware from AMD upstream (20250221)
     * SECURITY UPDATE (AMD-SB-3019 / CVE-2024-56161):
       Update remote attestation to be compatible with AMD systems with
       up-to-date firmware (i.e. which fixes "EntrySign"), and update
       AMD-SEV for AMD-SB-3019 mitigations.  Note that this AMD-SEV
       update DOES NOT FIX the microcode "EntrySign" vulnerability.
       (closes: #1095470)
     + Updated SEV firmware:
         Family 17h models 30h-3fh: version 0.24 build 20
         Family 19h models 00h-0fh: version 1.55 build 29
         Family 19h models 10h-1fh: version 1.55 build 39
         Family 19h models a0h-afh: version 1.55 build 39
       + New SEV firmware:
         Family 1ah models 00h-0fh: version 1.55 build 54
   * New AMD microcode updates from AMD upstream (20241121)
     + Add patches for many (non-server) family 19h processors
     * Updated Microcode patches:
       + Family=0x17 Model=0xa0 Stepping=0x00: Patch=0x08a0000a
     * New Microcode patches:
       + Family=0x17 Model=0x60 Stepping=0x01: Patch=0x0860010d
       + Family=0x17 Model=0x68 Stepping=0x01: Patch=0x08608108
       + Family=0x17 Model=0x71 Stepping=0x00: Patch=0x08701034
       + Family=0x19 Model=0x08 Stepping=0x02: Patch=0x0a00820c
       + Family=0x19 Model=0x18 Stepping=0x01: Patch=0x0a108108
       + Family=0x19 Model=0x21 Stepping=0x00: Patch=0x0a20102d
       + Family=0x19 Model=0x21 Stepping=0x02: Patch=0x0a201210
       + Family=0x19 Model=0x44 Stepping=0x01: Patch=0x0a404107
       + Family=0x19 Model=0x50 Stepping=0x00: Patch=0x0a500011
       + Family=0x19 Model=0x61 Stepping=0x02: Patch=0x0a601209
       + Family=0x19 Model=0x74 Stepping=0x01: Patch=0x0a704107
       + Family=0x19 Model=0x75 Stepping=0x02: Patch=0x0a705206
       + Family=0x19 Model=0x78 Stepping=0x00: Patch=0x0a708007
       + Family=0x19 Model=0x7c Stepping=0x00: Patch=0x0a70c005
Checksums-Sha1:
 cc92a632f4cebf26c72e3addca3c1742c9a54645 1802 amd64-microcode_3.20250311.1ubuntu1.dsc
 dbca0895517d3f12fdc38d1bdc9756031f4456ff 284032 amd64-microcode_3.20250311.1ubuntu1.tar.xz
 4daa867f9a29e8d9222e4ce08f205d27d810cdd2 6085 amd64-microcode_3.20250311.1ubuntu1_source.buildinfo
Checksums-Sha256:
 2cfe0cda3466af81010414d992314159e92847f15c39fdc981e9c178960f8200 1802 amd64-microcode_3.20250311.1ubuntu1.dsc
 00d72a6823177ea6190e57a21bb4e86777bc2aa5c9244a137ea1e743fe8301c9 284032 amd64-microcode_3.20250311.1ubuntu1.tar.xz
 18f98a2ad3036d90a720bddb43851812d70416c70dd96085871b22349c714573 6085 amd64-microcode_3.20250311.1ubuntu1_source.buildinfo
Files:
 9991ce28841fe09d25ca448f5ec06e60 1802 non-free-firmware/admin standard amd64-microcode_3.20250311.1ubuntu1.dsc
 2489cbc6a5165e7f33cad3ce5515ed81 284032 non-free-firmware/admin standard amd64-microcode_3.20250311.1ubuntu1.tar.xz
 1f7d501351e1429b9e1ab19bb2f75a1c 6085 non-free-firmware/admin standard amd64-microcode_3.20250311.1ubuntu1_source.buildinfo
Original-Maintainer: Henrique de Moraes Holschuh <hmh at debian.org>