-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Mar 2025 21:13:20 -0300 Source: amd64-microcode Architecture: source Version: 3.20250311.1 Distribution: unstable Urgency: medium Maintainer: Henrique de Moraes Holschuh <hmh@debian.org> Changed-By: Henrique de Moraes Holschuh <hmh@debian.org> Closes: 1095470 Changes: amd64-microcode (3.20250311.1) unstable; urgency=medium . * Update package data from linux-firmware 20250311 * New AMD-SEV firmware from AMD upstream (20250221) * SECURITY UPDATE (AMD-SB-3019 / CVE-2024-56161): Update remote attestation to be compatible with AMD systems with up-to-date firmware (i.e. which fixes "EntrySign"), and update AMD-SEV for AMD-SB-3019 mitigations. Note that this AMD-SEV update DOES NOT FIX the microcode "EntrySign" vulnerability. (closes: #1095470) + Updated SEV firmware: Family 17h models 30h-3fh: version 0.24 build 20 Family 19h models 00h-0fh: version 1.55 build 29 Family 19h models 10h-1fh: version 1.55 build 39 Family 19h models a0h-afh: version 1.55 build 39 + New SEV firmware: Family 1ah models 00h-0fh: version 1.55 build 54 * New AMD microcode updates from AMD upstream (20241121) + Add patches for many (non-server) family 19h processors * Updated Microcode patches: + Family=0x17 Model=0xa0 Stepping=0x00: Patch=0x08a0000a * New Microcode patches: + Family=0x17 Model=0x60 Stepping=0x01: Patch=0x0860010d + Family=0x17 Model=0x68 Stepping=0x01: Patch=0x08608108 + Family=0x17 Model=0x71 Stepping=0x00: Patch=0x08701034 + Family=0x19 Model=0x08 Stepping=0x02: Patch=0x0a00820c + Family=0x19 Model=0x18 Stepping=0x01: Patch=0x0a108108 + Family=0x19 Model=0x21 Stepping=0x00: Patch=0x0a20102d + Family=0x19 Model=0x21 Stepping=0x02: Patch=0x0a201210 + Family=0x19 Model=0x44 Stepping=0x01: Patch=0x0a404107 + Family=0x19 Model=0x50 Stepping=0x00: Patch=0x0a500011 + Family=0x19 Model=0x61 Stepping=0x02: Patch=0x0a601209 + Family=0x19 Model=0x74 Stepping=0x01: Patch=0x0a704107 + Family=0x19 Model=0x75 Stepping=0x02: Patch=0x0a705206 + Family=0x19 Model=0x78 Stepping=0x00: Patch=0x0a708007 + Family=0x19 Model=0x7c Stepping=0x00: Patch=0x0a70c005 Checksums-Sha1: 66216cbf90e06dcc51075121dc381717f138530e 1695 amd64-microcode_3.20250311.1.dsc 5e9d97bd2ca714117af4ad89ac865e6918f3257c 282896 amd64-microcode_3.20250311.1.tar.xz 34575a584f1fc40e76c1520d2404c8f008db10f1 6470 amd64-microcode_3.20250311.1_amd64.buildinfo Checksums-Sha256: 81571b20245caf7ef0bd29995a7f55c7e031087069b816fe4a451a4a9716a40a 1695 amd64-microcode_3.20250311.1.dsc dbf62285e81b03a684f519802449e7ff0e51fbeb26e769ae08d41aba3d520a20 282896 amd64-microcode_3.20250311.1.tar.xz bb6b8954f338d8a60a4c22d3ef04821829481a7f908b97157b1ecfc8059a11dc 6470 amd64-microcode_3.20250311.1_amd64.buildinfo Files: a4f5c5926a5ff8f32073b7573361f871 1695 non-free-firmware/admin standard amd64-microcode_3.20250311.1.dsc 08cd1609a0d186aed54716c96945c717 282896 non-free-firmware/admin standard amd64-microcode_3.20250311.1.tar.xz 709202c82fa0226fd754200e503cadb9 6470 non-free-firmware/admin standard amd64-microcode_3.20250311.1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpvbMGUAhfu+gsYOwlOXoPKamj0cFAmfgpj4ACgkQlOXoPKam j0dB1BAAy1LUUSUsh1Zbu+f+OGp/nvsajBOEpgwLRDhp69ZravynbS26qWCEWTc6 2JjeLMtLHRYpa6VDGSHvAQ6/DdCx+ZeFJHrZKukahs0LWZqphV2/+gKSon+idwX3 aKR/c6vIRR8KTz+G2hL1IKD0+gWC2dCCtHzuedFWx+MfyeMf0h4+DOmfKxrlbrc2 ABxaprg0wZWTPL7dUyIykmbDuWD43/GP863eEKF1rgVgytBwmvPEo2YfYFemajxJ wQlMEy4zY/UP7pah9OkHZ7r2T8ew3Zix2+DzzUiWVMmzIqTYDX1U1AvJhiEUjz0O m+iG4/19YzYEVS+HNzuBi87P4qtSp06wuC11SyFKtrJo6BjdSweY4mrLSJmBBmxM CN5cXBfKA9g2M1loMkC0cetbqbAXP/Up01mscJNkyFQ+zLyZET6Q9eWcXUdjGjnC z0xFHTdPN7HPbFGOQvSJ4SBTu4TueFgju0P14v9ApxJCY5yuGxBEEapTLyzx/qcK ynVmuBFQXBBKSgVMd2fjPaJay8jATQkrmOYJDe2WZHUmHi4Sv3o6L5mh4otgR+V5 pFvfUVOzydWpVYTL1u9eBTOLdFmO3Kah3o7AcSs8Hsgs+Q4hpFhVsi1hiZQtn8/O sbR9UDIlgiPPqeTN4xgNGF+UwRQ8ihE71EICsYB1L3JgchbRMVY= =0hQQ -----END PGP SIGNATURE-----
