-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Mar 2018 00:00:33 -0300 Source: intel-microcode Binary: intel-microcode Architecture: amd64 i386 source Version: 3.20180312.1~bpo8+1 Distribution: jessie-backports-sloppy Urgency: critical Maintainer: Henrique de Moraes Holschuh <hmh@debian.org> Changed-By: Henrique de Moraes Holschuh <hmh@debian.org> Closes: 886367 886368 886998 Description: intel-microcode - Processor microcode firmware for Intel CPUs Changes: intel-microcode (3.20180312.1~bpo8+1) jessie-backports-sloppy; urgency=medium . * Rebuild for jessie-backports-sloppy (no changes) . intel-microcode (3.20180312.1) unstable; urgency=medium . * New upstream microcode data file 20180312 (closes: #886367) + New Microcodes: sig 0x00050653, pf_mask 0x97, 2018-01-29, rev 0x1000140, size 30720 sig 0x00050665, pf_mask 0x10, 2018-01-22, rev 0xe000009, size 18432 + Updated Microcodes: sig 0x000206a7, pf_mask 0x12, 2018-02-07, rev 0x002d, size 12288 sig 0x000206d6, pf_mask 0x6d, 2018-01-30, rev 0x061c, size 18432 sig 0x000206d7, pf_mask 0x6d, 2018-01-26, rev 0x0713, size 19456 sig 0x000306a9, pf_mask 0x12, 2018-02-07, rev 0x001f, size 13312 sig 0x000306c3, pf_mask 0x32, 2018-01-21, rev 0x0024, size 23552 sig 0x000306d4, pf_mask 0xc0, 2018-01-18, rev 0x002a, size 18432 sig 0x000306e4, pf_mask 0xed, 2018-01-25, rev 0x042c, size 15360 sig 0x000306e7, pf_mask 0xed, 2018-02-16, rev 0x0713, size 16384 sig 0x000306f2, pf_mask 0x6f, 2018-01-19, rev 0x003c, size 33792 sig 0x000306f4, pf_mask 0x80, 2018-01-22, rev 0x0011, size 17408 sig 0x00040651, pf_mask 0x72, 2018-01-18, rev 0x0023, size 21504 sig 0x00040661, pf_mask 0x32, 2018-01-21, rev 0x0019, size 25600 sig 0x00040671, pf_mask 0x22, 2018-01-21, rev 0x001d, size 12288 sig 0x000406e3, pf_mask 0xc0, 2017-11-16, rev 0x00c2, size 99328 sig 0x00050654, pf_mask 0xb7, 2018-01-26, rev 0x2000043, size 28672 sig 0x00050662, pf_mask 0x10, 2018-01-22, rev 0x0015, size 31744 sig 0x00050663, pf_mask 0x10, 2018-01-22, rev 0x7000012, size 22528 sig 0x00050664, pf_mask 0x10, 2018-01-22, rev 0xf000011, size 22528 sig 0x000506e3, pf_mask 0x36, 2017-11-16, rev 0x00c2, size 99328 sig 0x000806e9, pf_mask 0xc0, 2018-01-21, rev 0x0084, size 98304 sig 0x000806ea, pf_mask 0xc0, 2018-01-21, rev 0x0084, size 97280 sig 0x000906e9, pf_mask 0x2a, 2018-01-21, rev 0x0084, size 98304 sig 0x000906ea, pf_mask 0x22, 2018-01-21, rev 0x0084, size 96256 sig 0x000906eb, pf_mask 0x02, 2018-01-21, rev 0x0084, size 98304 + Implements IBRS/IBPB/STIPB support, Spectre-v2 mitigation for: Sandybridge, Ivy Bridge, Haswell, Broadwell, Skylake, Kaby Lake, Coffee Lake + Missing production updates: + Broadwell-E/EX Xeons (sig 0x406f1) + Anniedale/Morefield, Apollo Lake, Avoton, Cherry Trail, Braswell, Gemini Lake, Denverton * Update past changelog entries with new information: Intel already had all necessary semanthics in LFENCE, so the Spectre-related Intel microcode changes did not need to enhance LFENCE. * debian/control: update Vcs-* fields for the move to salsa.debian.org . intel-microcode (3.20180108.1+really20171117.1) unstable; urgency=critical . * Revert to release 20171117, as per Intel instructions issued to the public in 2018-01-22 (closes: #886998) * This effectively removes IBRS/IBPB/STIPB microcode support for Spectre variant 2 mitigation. . intel-microcode (3.20180108.1) unstable; urgency=high . * New upstream microcode data file 20180108 (closes: #886367) + Updated Microcodes: sig 0x000306c3, pf_mask 0x32, 2017-11-20, rev 0x0023, size 23552 sig 0x000306d4, pf_mask 0xc0, 2017-11-17, rev 0x0028, size 18432 sig 0x000306e4, pf_mask 0xed, 2017-12-01, rev 0x042a, size 15360 sig 0x000306f2, pf_mask 0x6f, 2017-11-17, rev 0x003b, size 33792 sig 0x000306f4, pf_mask 0x80, 2017-11-17, rev 0x0010, size 17408 sig 0x00040651, pf_mask 0x72, 2017-11-20, rev 0x0021, size 22528 sig 0x00040661, pf_mask 0x32, 2017-11-20, rev 0x0018, size 25600 sig 0x00040671, pf_mask 0x22, 2017-11-17, rev 0x001b, size 13312 sig 0x000406e3, pf_mask 0xc0, 2017-11-16, rev 0x00c2, size 99328 sig 0x00050654, pf_mask 0xb7, 2017-12-08, rev 0x200003c, size 27648 sig 0x00050662, pf_mask 0x10, 2017-12-16, rev 0x0014, size 31744 sig 0x00050663, pf_mask 0x10, 2017-12-16, rev 0x7000011, size 22528 sig 0x000506e3, pf_mask 0x36, 2017-11-16, rev 0x00c2, size 99328 sig 0x000706a1, pf_mask 0x01, 2017-12-26, rev 0x0022, size 73728 sig 0x000806e9, pf_mask 0xc0, 2018-01-04, rev 0x0080, size 98304 sig 0x000806ea, pf_mask 0xc0, 2018-01-04, rev 0x0080, size 98304 sig 0x000906e9, pf_mask 0x2a, 2018-01-04, rev 0x0080, size 98304 sig 0x000906ea, pf_mask 0x22, 2018-01-04, rev 0x0080, size 97280 sig 0x000906eb, pf_mask 0x02, 2018-01-04, rev 0x0080, size 98304 + Implements IBRS/IBPB support: mitigation against Spectre (CVE-2017-5715) + Very likely fixes several other errata on some of the processors * supplementary-ucode-CVE-2017-5715.d/: remove. + Downgraded microcodes: sig 0x000406f1, pf_mask 0xef, 2017-03-01, rev 0xb000021, size 26624 sig 0x000506c9, pf_mask 0x03, 2017-03-25, rev 0x002c, size 16384 + Recall related to bug #886998 * source: remove superseded upstream data file: 20171117 * README.Debian, copyright: update download URLs (closes: #886368) . intel-microcode (3.20171215.1) unstable; urgency=high . * Add supplementary-ucode-CVE-2017-5715.d/: (closes: #886367) New upstream microcodes to partially address CVE-2017-5715 + Updated Microcodes: sig 0x000306c3, pf_mask 0x32, 2017-11-20, rev 0x0023, size 23552 sig 0x000306d4, pf_mask 0xc0, 2017-11-17, rev 0x0028, size 18432 sig 0x000306f2, pf_mask 0x6f, 2017-11-17, rev 0x003b, size 33792 sig 0x00040651, pf_mask 0x72, 2017-11-20, rev 0x0021, size 22528 sig 0x000406e3, pf_mask 0xc0, 2017-11-16, rev 0x00c2, size 99328 sig 0x000406f1, pf_mask 0xef, 2017-11-18, rev 0xb000025, size 27648 sig 0x00050654, pf_mask 0xb7, 2017-11-21, rev 0x200003a, size 27648 sig 0x000506c9, pf_mask 0x03, 2017-11-22, rev 0x002e, size 16384 sig 0x000806e9, pf_mask 0xc0, 2017-12-03, rev 0x007c, size 98304 sig 0x000906e9, pf_mask 0x2a, 2017-12-03, rev 0x007c, size 98304 * Implements IBRS and IBPB support via new MSR (Spectre variant 2 mitigation, indirect branches). Support is exposed through cpuid(7).EDX. Checksums-Sha1: 013a61f41976ce2f629c9ff80e5902bc7983571f 1813 intel-microcode_3.20180312.1~bpo8+1.dsc a8027c0aee5d00127e0401d8311dc53c8a30949b 1687008 intel-microcode_3.20180312.1~bpo8+1.tar.xz 64a0693517ee466a9709ccc2a3ba4070df871a8c 1157448 intel-microcode_3.20180312.1~bpo8+1_amd64.deb d5a552cf0546b18fb8a3786e5b69c7ac573e5c40 1298140 intel-microcode_3.20180312.1~bpo8+1_i386.deb Checksums-Sha256: 821941e6ec7267fb3e1e39a7b3dec8f6a8ac6db2b7c164e1992a3d55b08f7c1b 1813 intel-microcode_3.20180312.1~bpo8+1.dsc dfaf488c4f40b83af0c031c604e947ec625e2aeb7598e269e33308dba47d4519 1687008 intel-microcode_3.20180312.1~bpo8+1.tar.xz 6d70f855b87b22bee311fbba1db8cd5de43d624ca83d06af040c022a0c3433ad 1157448 intel-microcode_3.20180312.1~bpo8+1_amd64.deb 3802c87c72ea8c19c33c6c392039d12b5bdd0c3838263586227dba2674c94344 1298140 intel-microcode_3.20180312.1~bpo8+1_i386.deb Files: e75e2d5d6dd6b9f5ae981afb17ab0b0f 1813 non-free/admin standard intel-microcode_3.20180312.1~bpo8+1.dsc d2372e32434bdd630989b091fe7b2b8d 1687008 non-free/admin standard intel-microcode_3.20180312.1~bpo8+1.tar.xz 95856664498b04663a70c8662fea4c8e 1157448 non-free/admin standard intel-microcode_3.20180312.1~bpo8+1_amd64.deb b1516d1cff358c60310129adf4e0d782 1298140 non-free/admin standard intel-microcode_3.20180312.1~bpo8+1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEq7GuO+cOOhDUp+2l/hG/posVjpgFAlqp5KcACgkQ/hG/posV jphySBAAglriYLn24QhrBgaNo/IQyUXRW6QgjulItC5Vaek8Kb7EqLz2L7png7RE DArhCxbT/Xj0iK9uJ/j+aO6ClGI12/QhEq6QZnJ5UzlmFdpF+5VvhgGqfpKa8MQo ImVA37v0nbyND/AxNY0J3vi2IpAyRFVAywXmvBXMSvymYlTEs8RonV61D8RBL025 xhB0enke2uBksPpxB+VObNiP04yGmzQfFxJkC52rJI7p75ywBL58aQXqCuOR7agj 2VVPhsBhnEWlzJ+enNV8+KPGvz0K4htOxL26iOKD9zh6anUzf7G49414t0h+fIdT qrwUCpXqK4LQRcUp0ADK3Zjf78xZ0Z2KCJtVw3Fx5P4w2wIwThWUymX0W2Zz6aWN 8krSAe1B3/YHYOfXjEGfQSlrsYQ3FrCjAlPBwmsv6hicHMFO38mrqSbL3GA3AF3X 7QS4OLYGz8VUq4wUhI94S9oLA50CcWG8SMgHV7U5omlIXw9Vi/VWHA9kpKX6N5yC 5/UNu8jM6K3xeM/jpyOv8gfgCThHrEaOkKiNULDStA6sxOAy9yaiVlgrPqg+oV4+ +o9X1OuZEItx8qgxboqkMJQt+3fOZInG9ag9EppusJ5m75e1bUDH42Hq8sKltRO2 khhzVdA8OM9B2eggoJAuhSYtXgRnKqBa0wk7qemkEpKp8h8DvDQ= =5/7J -----END PGP SIGNATURE-----