Accepted intel-microcode 3.20200609.2~deb10u1 (amd64 i386 source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 11 Jun 2020 09:23:16 -0300
Binary: intel-microcode
Source: intel-microcode
Architecture: amd64 i386 source
Version: 3.20200609.2~deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Henrique de Moraes Holschuh <hmh@debian.org>
Changed-By: Henrique de Moraes Holschuh <hmh@debian.org>
Description:
intel-microcode - Processor microcode firmware for Intel CPUs
Changes:
intel-microcode (3.20200609.2~deb10u1) buster-security; urgency=high
.
* Rebuild for buster-security, no changes
Refer to changelog entries for 3.20200609.2 and 3.20200609.1 for details
.
intel-microcode (3.20200609.2) unstable; urgency=medium
.
* REGRESSION FIX: 0x406e3: rollback to rev 0xd6 and document regression
* Microcode rollbacks (closes: LP#1883002)
sig 0x000406e3, pf_mask 0xc0, 2019-10-03, rev 0x00d6, size 101376
* THIS REMOVES THE SECURITY FIXES FOR SKYLAKE-U/Y PROCESSORS
* Avoid hangs on boot on (some?) Skylake-U/Y processors,
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/31
* ucode-blacklist: blacklist models 0x8e and 0x9e from late-loading,
just in case. Note that Debian does not do late loading by itself.
Refer to LP#1883002 for the report, 0x806ec hangs upon late load.
.
intel-microcode (3.20200609.1) unstable; urgency=high
.
* SECURITY UPDATE
* For most processors: SRBDS and/or VRDS, L1DCES mitigations depending
on the processor model
* For Skylake HEDT and Skylake Xeons with signature 0x50654: VRDS and
L1DCES mitigations, plus mitigations described in the changelog entry
for package release 3.20191112.1.
* Expect some performance impact, the mitigations are enabled by
default. A Linux kernel update will be issued that allows one to
selectively disable the mitigations.
* New upstream microcode datafile 20200609
* Implements mitigation for CVE-2020-0543 Special Register Buffer Data
Sampling (SRBDS), INTEL-SA-00320, CROSSTalk
* Implements mitigation for CVE-2020-0548 Vector Register Data Sampling
(VRDS), INTEL-SA-00329
* Implements mitigation for CVE-2020-0549 L1D Cache Eviction Sampling
(L1DCES), INTEL-SA-00329
* Known to fix the regression introduced in release 2019-11-12 (sig
0x50564, rev. 0x2000065), which would cause several systems with
Skylake Xeon, Skylake HEDT processors to hang while rebooting
* Updated Microcodes:
sig 0x000306c3, pf_mask 0x32, 2019-11-12, rev 0x0028, size 23552
sig 0x000306d4, pf_mask 0xc0, 2019-11-12, rev 0x002f, size 19456
sig 0x00040651, pf_mask 0x72, 2019-11-12, rev 0x0026, size 22528
sig 0x00040661, pf_mask 0x32, 2019-11-12, rev 0x001c, size 25600
sig 0x00040671, pf_mask 0x22, 2019-11-12, rev 0x0022, size 14336
sig 0x000406e3, pf_mask 0xc0, 2020-04-27, rev 0x00dc, size 104448
sig 0x00050653, pf_mask 0x97, 2020-04-24, rev 0x1000157, size 32768
sig 0x00050654, pf_mask 0xb7, 2020-04-24, rev 0x2006906, size 34816
sig 0x00050656, pf_mask 0xbf, 2020-04-23, rev 0x4002f01, size 52224
sig 0x00050657, pf_mask 0xbf, 2020-04-23, rev 0x5002f01, size 52224
sig 0x000506e3, pf_mask 0x36, 2020-04-27, rev 0x00dc, size 104448
sig 0x000806e9, pf_mask 0x10, 2020-04-27, rev 0x00d6, size 103424
sig 0x000806e9, pf_mask 0xc0, 2020-04-27, rev 0x00d6, size 103424
sig 0x000806ea, pf_mask 0xc0, 2020-04-27, rev 0x00d6, size 103424
sig 0x000806eb, pf_mask 0xd0, 2020-04-27, rev 0x00d6, size 103424
sig 0x000806ec, pf_mask 0x94, 2020-04-23, rev 0x00d6, size 103424
sig 0x000906e9, pf_mask 0x2a, 2020-04-23, rev 0x00d6, size 103424
sig 0x000906ea, pf_mask 0x22, 2020-04-27, rev 0x00d6, size 102400
sig 0x000906eb, pf_mask 0x02, 2020-04-23, rev 0x00d6, size 103424
sig 0x000906ec, pf_mask 0x22, 2020-04-27, rev 0x00d6, size 102400
sig 0x000906ed, pf_mask 0x22, 2020-04-23, rev 0x00d6, size 103424
* Restores the microcode-level fixes that were reverted by release
3.20191115.2 for sig 0x50654 (Skylake Xeon, Skylake HEDT)
.
intel-microcode (3.20200520.1) unstable; urgency=medium
.
* New upstream microcode datafile 20200520
+ Updated Microcodes:
sig 0x000206d6, pf_mask 0x6d, 2020-03-04, rev 0x0621, size 18432
sig 0x000206d7, pf_mask 0x6d, 2020-03-24, rev 0x071a, size 19456
.
intel-microcode (3.20200508.1) unstable; urgency=medium
.
* New upstream microcode datafile 20200508
+ Updated Microcodes:
sig 0x000706e5, pf_mask 0x80, 2020-03-12, rev 0x0078, size 107520
* Likely fixes several critical errata on IceLake-U/Y causing system
hangs
Checksums-Sha1:
5d21849f25bac9b5d17c3ba58b98bddc420d5b21 1821 intel-microcode_3.20200609.2~deb10u1.dsc
486347b72f7ada23c0a4896d03403ab8bf120367 3244764 intel-microcode_3.20200609.2~deb10u1.tar.xz
9da0a459c92e1ee31ffc01df9dd0dc9e21582268 5630 intel-microcode_3.20200609.2~deb10u1_amd64.buildinfo
f9ac107334f7591bd0169b1371ca3138056f4f84 2547120 intel-microcode_3.20200609.2~deb10u1_amd64.deb
708f38aa7e798554f7f45bf21f3b25b50a900136 4407 intel-microcode_3.20200609.2~deb10u1_i386.buildinfo
f722a8db7c74d2f8da61dfa369907d2754a903ec 2684612 intel-microcode_3.20200609.2~deb10u1_i386.deb
Checksums-Sha256:
e309138d3d708fd360508fd4f55ebf34bd72340c9391a42cc50a42efb589350b 1821 intel-microcode_3.20200609.2~deb10u1.dsc
0ff80d54253a9ceef39a25bcb79db7b22dde14b0bb9d35a3dd052500806856a8 3244764 intel-microcode_3.20200609.2~deb10u1.tar.xz
91e20248951fb51bd8639c264f2aba6c01c5e605e0ef2e70b58115b7613e5321 5630 intel-microcode_3.20200609.2~deb10u1_amd64.buildinfo
5898d6089fc6365953ad698b3246e4fccd8d278543635ac8110d29b61793bdc5 2547120 intel-microcode_3.20200609.2~deb10u1_amd64.deb
2ca6aaf208a178b162944135131901b27876be9232f132f05962082b4c7fd506 4407 intel-microcode_3.20200609.2~deb10u1_i386.buildinfo
6c36a6fbcde0f1fd16b83ae0c2ce7826321bbd634d939db45f6956f8ae6dd432 2684612 intel-microcode_3.20200609.2~deb10u1_i386.deb
Files:
77fb825a9bf84e0f5d031c22640301cb 1821 non-free/admin standard intel-microcode_3.20200609.2~deb10u1.dsc
dfb22d6a24a2278c6efa4ad3db3e492c 3244764 non-free/admin standard intel-microcode_3.20200609.2~deb10u1.tar.xz
62fe16c3c8d70c5d14e53d88a5a7a331 5630 non-free/admin standard intel-microcode_3.20200609.2~deb10u1_amd64.buildinfo
6e85bf634e9e79696edfff8e3b1f08da 2547120 non-free/admin standard intel-microcode_3.20200609.2~deb10u1_amd64.deb
95b38d639ac980fee0ad000fd7da206c 4407 non-free/admin standard intel-microcode_3.20200609.2~deb10u1_i386.buildinfo
2a6f596b52ebc840578df343315f8e5a 2684612 non-free/admin standard intel-microcode_3.20200609.2~deb10u1_i386.deb
-----BEGIN PGP SIGNATURE-----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=tAxw
-----END PGP SIGNATURE-----