Change log for amd64-microcode package in Ubuntu

126 of 26 results
Published in trusty-updates on 2018-08-20
Deleted in trusty-proposed (Reason: moved to -updates)
amd64-microcode (3.20180524.1~ubuntu0.14.04.2+really20130710.1ubuntu1) trusty; urgency=medium

  * Install (all) microcode on non-amd systems too if MODULES=most in initramfs-tools
    config (LP: #1778738)

 -- Julian Andres Klode <email address hidden>  Tue, 07 Aug 2018 14:09:42 +0200
Superseded in trusty-updates on 2018-08-20
Published in trusty-security on 2018-07-05
amd64-microcode (3.20180524.1~ubuntu0.14.04.2+really20130710.1) trusty-security; urgency=medium

  * REGRESSION UPDATE: revert to 2.20131007.1+really20130710.1 due to
    3.20180524.1~ubuntu0.14.04.1 causing boot looping for some AMD
    processors (LP: #1779092)

 -- Steve Beattie <email address hidden>  Tue, 03 Jul 2018 14:11:11 -0700
Published in bionic-updates on 2018-07-30
Deleted in bionic-proposed (Reason: moved to -updates)
amd64-microcode (3.20180524.1~ubuntu0.18.04.2) bionic; urgency=medium

  * Default to 'early' instead of 'auto' in the initramfs-tools hook
    when building with MODULES=most (LP: #1778738)

 -- Julian Andres Klode <email address hidden>  Tue, 26 Jun 2018 16:32:22 +0200
Published in artful-proposed on 2018-07-02
amd64-microcode (3.20180524.1~ubuntu0.17.10.2) artful; urgency=medium

  * Default to 'early' instead of 'auto' in the initramfs-tools hook
    when building with MODULES=most (LP: #1778738)

 -- Julian Andres Klode <email address hidden>  Tue, 26 Jun 2018 16:32:22 +0200
Published in xenial-updates on 2018-07-26
Deleted in xenial-proposed (Reason: moved to -updates)
amd64-microcode (3.20180524.1~ubuntu0.16.04.2) xenial; urgency=medium

  * Default to 'early' instead of 'auto' in the initramfs-tools hook
    when building with MODULES=most (LP: #1778738)

 -- Julian Andres Klode <email address hidden>  Tue, 26 Jun 2018 16:32:22 +0200
Deleted in trusty-proposed on 2018-07-07 (Reason: moved to -updates)
amd64-microcode (3.20180524.1~ubuntu0.14.04.2) trusty; urgency=medium

  * Default to 'early' instead of 'auto' in the initramfs-tools hook
    when building with MODULES=most (LP: #1778738)

 -- Julian Andres Klode <email address hidden>  Tue, 26 Jun 2018 16:32:22 +0200
Published in disco-release on 2018-10-30
Published in cosmic-release on 2018-06-27
Deleted in cosmic-proposed (Reason: moved to release)
amd64-microcode (3.20180524.1ubuntu1) cosmic; urgency=medium

  * Default to 'early' instead of 'auto' in the initramfs-tools hook
    when building with MODULES=most (LP: #1778738)

 -- Julian Andres Klode <email address hidden>  Tue, 26 Jun 2018 16:32:22 +0200
Superseded in trusty-updates on 2018-07-05
Superseded in trusty-security on 2018-07-05
amd64-microcode (3.20180524.1~ubuntu0.14.04.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Add Spectre Variant 2 protection for family 17h AMD
    processors (CVE-2017-5715)
    - Backport to xenial.
    - debian/initramfs.hook: support for amd64 early loading has been
      backported to 3.13 in Ubuntu, so only block kernels before that.
    - debian/control: early initramfs loading of microcode was added in
      initramfs-tools 0.103ubuntu4 for trusty, so recommend that version
      or later

Superseded in xenial-updates on 2018-07-26
Published in xenial-security on 2018-06-20
amd64-microcode (3.20180524.1~ubuntu0.16.04.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Add Spectre Variant 2 protection for family 17h AMD
    processors (CVE-2017-5715)
    - Backport to xenial.

Published in artful-updates on 2018-06-20
Published in artful-security on 2018-06-20
amd64-microcode (3.20180524.1~ubuntu0.17.10.1) artful-security; urgency=medium

  * SECURITY UPDATE: Add Spectre Variant 2 protection for family 17h AMD
    processors (CVE-2017-5715)
    - Backport to artful.

Superseded in bionic-updates on 2018-07-30
Published in bionic-security on 2018-06-20
amd64-microcode (3.20180524.1~ubuntu0.18.04.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Add Spectre Variant 2 protection for family 17h AMD
    processors (CVE-2017-5715)
    - Backport to bionic.

Superseded in cosmic-release on 2018-06-27
Deleted in cosmic-proposed on 2018-06-28 (Reason: moved to release)
amd64-microcode (3.20180524.1) unstable; urgency=high

  * New microcode update packages from AMD upstream:
    + Re-added Microcodes:
      sig 0x00610f01, patch id 0x06001119, 2012-07-13
  * This update avoids regressing sig 0x610f01 processors on systems with
    outdated firmware by adding back exactly the same microcode patch that was
    present before [for these processors].  It does not implement Spectre-v2
    mitigation for these processors.
  * README: update for new release

 -- Henrique de Moraes Holschuh <email address hidden>  Fri, 25 May 2018 15:38:22 -0300

Available diffs

Superseded in cosmic-release on 2018-05-26
Deleted in cosmic-proposed on 2018-05-27 (Reason: moved to release)
amd64-microcode (3.20180515.1) unstable; urgency=high

  * New microcode update packages from AMD upstream:
    + New Microcodes:
      sig 0x00800f12, patch id 0x08001227, 2018-02-09
    + Updated Microcodes:
      sig 0x00600f12, patch id 0x0600063e, 2018-02-07
      sig 0x00600f20, patch id 0x06000852, 2018-02-06
    + Removed Microcodes:
      sig 0x00610f01, patch id 0x06001119, 2012-07-13
  * Adds Spectre v2 (CVE-2017-5715) microcode-based mitigation support,
    plus other unspecified fixes/updates.
  * README, debian/copyright: update for new release

 -- Henrique de Moraes Holschuh <email address hidden>  Sat, 19 May 2018 13:51:06 -0300

Available diffs

Superseded in cosmic-release on 2018-05-20
Deleted in cosmic-proposed on 2018-05-21 (Reason: moved to release)
amd64-microcode (3.20171205.2) unstable; urgency=medium

  * debian/control: update Vcs-* fields for salsa.debian.org

 -- Henrique de Moraes Holschuh <email address hidden>  Fri, 04 May 2018 07:51:40 -0300

Available diffs

Superseded in cosmic-release on 2018-05-05
Published in bionic-release on 2018-01-11
Deleted in bionic-proposed (Reason: moved to release)
amd64-microcode (3.20171205.1) unstable; urgency=high

  * New microcode updates (closes: #886382):
    sig 0x00800f12, patch id 0x08001213, 2017-12-05
    Thanks to SuSE for distributing these ahead of AMD's official release!
  * Add IBPB support for family 17h AMD processors (CVE-2017-5715)
  * README: describe source for faml17h microcode update
  * Upload to unstable to match IBPB microcode support on Intel in Debian
    unstable.
  * WARNING: requires at least kernel 4.15, 4.14.13, 4.9.76, 4.4.111 (or a
    backport of commit f4e9b7af0cd58dd039a0fb2cd67d57cea4889abf
    "x86/microcode/AMD: Add support for fam17h microcode loading") otherwise
    it will not be applied to the processor.

 -- Henrique de Moraes Holschuh <email address hidden>  Mon, 08 Jan 2018 12:19:57 -0200

Available diffs

Superseded in artful-security on 2018-06-20
Obsolete in zesty-security on 2018-06-22
Obsolete in zesty-updates on 2018-06-22
Superseded in zesty-updates on 2018-01-09
Superseded in artful-updates on 2018-06-20
Superseded in artful-updates on 2018-01-04
Superseded in bionic-release on 2018-01-11
Superseded in bionic-release on 2018-01-04
Published in artful-release on 2017-04-20
Obsolete in zesty-release on 2018-06-22
Deleted in zesty-proposed (Reason: moved to release)
amd64-microcode (3.20160316.3) unstable; urgency=medium

  * initramfs: Make the early initramfs reproducible (closes: #845194)
  * rules: switch to simplified dh-based build (debhelper v9)

 -- Henrique de Moraes Holschuh <email address hidden>  Tue, 29 Nov 2016 23:54:53 -0200

Available diffs

Superseded in zesty-release on 2016-12-01
Deleted in zesty-proposed on 2016-12-02 (Reason: moved to release)
amd64-microcode (3.20160316.2) unstable; urgency=medium

  * NEWS.debian: fix minor typo
  * debian/control, debian/compat: bump debhelper compat mode to 9
  * debian/control: bump standards version to 3.9.8 (no changes needed)
  * debian/: prefix binary-package control files with package name
  * debian/control: recommend tiny-initramfs as an alternative to
    initramfs-tools tiny-initramfs specifically supports early microcode
    updates, so it is a viable alternative to initramfs-tools
    (closes: #839882)

 -- Henrique de Moraes Holschuh <email address hidden>  Sun, 09 Oct 2016 15:43:16 -0300

Available diffs

Superseded in zesty-release on 2016-11-02
Obsolete in yakkety-release on 2018-01-23
Deleted in yakkety-proposed on 2018-01-23 (Reason: moved to release)
amd64-microcode (3.20160316.1) unstable; urgency=low

  * Bump major version number to 3: early-initramfs support
  * Support is now restricted to Linux kernel 3.14 and later.  For older
    kernels, please use the version 2 (older) branch of the package.
  * Implement early-initramfs mode, and remove normal mode
    * debian/control: add versioned recommends for initramfs-tools and
      dracut.  Note that dracut 044 is required for Linux 4.4 and later,
      otherwise dracut 040 would be enough
    * debian/default: add early mode, remove normal mode from comments
    * initramfs hook: use cpio to generate an early-initramfs with
      microcode for all processors, blacklist kernels older than 3.14,
      and remove normal mode support.
    * initramfs.init-premount: remove, not needed for early-initramfs
    * debian/rules: don't install init-premount initramfs script.
  * initramfs.hook: detect a missing microcode.ko and don't attempt to
    force_load() it.  In verbose mode, log when the microcode driver is
    modular.  For Linux 4.4 and later, skip the module loading logic
    (closes: #809444)
  * README.Debian: update for early initramfs support, and add information
    on how to disable early updates using the dis_ucode_ldr kernel boot
    parameter
  * Support for x32 was enabled in debian/control for the 2.20160316.1
    upload, but the changelog did not record this by mistake.  The missing
    entry was retroactively added to debian/changelog by this upload

 -- Henrique de Moraes Holschuh <email address hidden>  Sun, 10 Apr 2016 16:31:23 -0300

Available diffs

Superseded in xenial-security on 2018-06-20
Superseded in xenial-updates on 2018-06-20
Superseded in xenial-updates on 2018-01-09
Superseded in yakkety-release on 2016-04-27
Published in xenial-release on 2016-03-23
Deleted in xenial-proposed (Reason: moved to release)
amd64-microcode (2.20160316.1) unstable; urgency=critical

  * Upstream release 20160316 built from linux-firmware:
    + Updated Microcodes:
      sig 0x00600f20, patch id 0x0600084f, 2016-01-25
    + This microcode updates fixes a critical erratum on NMI handling
      introduced by microcode patch id 0x6000832 from the 20141028 update.
      The erratum is also present on microcode patch id 0x6000836.
    + THIS IS A CRITICAL STABILITY AND SECURITY UPDATE FOR THE EARLIER
      AMD PILEDRIVER PROCESSORS, including:
      + AMD Opteron 3300, 4300, 6300
      + AMD FX "Vishera" (43xx, 63xx, 83xx, 93xx, 95xx)
      + AMD processors with family 21, model 2, stepping 0
  * Robert Święcki, while fuzzing the kernel using the syzkaller tool,
    uncovered very strange behavior on an AMD FX-8320, later reproduced on
    other AMD Piledriver model 2, stepping 0 processors including the Opteron
    6300.  Robert discovered, using his proof-of-concept exploit code, that
    the incorrect behavior allows an unpriviledged attacker on an unpriviledged
    VM to corrupt the return stack of the host kernel's NMI handler.  At best,
    this results in unpredictable host behavior.  At worst, it allows for an
    unpriviledged user on unpriviledged VM to carry a sucessful host-kernel
    ring 0 code injection attack.
  * The erratum is timing-dependant, easily triggered by workloads that cause
    a high number of NMIs, such as running the "perf" tool.

 -- Henrique de Moraes Holschuh <email address hidden>  Sat, 19 Mar 2016 14:02:44 -0300

Available diffs

Superseded in xenial-release on 2016-03-23
Obsolete in wily-release on 2018-01-22
Obsolete in vivid-release on 2018-01-18
Deleted in vivid-proposed on 2018-01-22 (Reason: moved to release)
amd64-microcode (2.20141028.1) unstable; urgency=medium


  * Upstream release 20141028 built from linux-firmware:
    + Updated microcode patches for family 0x15 processors
    + Added microcode patches for family 0x16 processors
  * AMD did not update the relevant microcode documentation (errata fixed,
    microcode patch levels, etc), so there is no documentation for the
    family 0x16 microcode patches, and the documentation for family 0x15 is
    stale.
  * postinst: do not update microcode on upgrades:
    Remove code that triggers a microcode update on package upgrade.  The
    resulting postinst script is now identical to the one in Debian jessie's
    intel-microcode, and thus known-good.
    NOTE: this code was already disabled for the majority of the users due
    to Debian bug #723975 (closes: #723975, #723081)
  * kpreinst: remove, we don't update microcode on postinst anymore
  * blacklist automated loading of the microcode module:
    This is in line with the desired behavior of only updating microcode
    *automatically* during system boot, when it is safer to do so.  The
    local admin can still load the microcode module and update the microcode
    manually at any time, of course.  This is in sync with the intel-microcode
    packages in Debian jessie, which will also blacklist the microcode module.
    Note that the initramfs will force-load the microcode module in a safe
    condition, the blacklist avoids module autoloading outside the initramfs
  * control: bump standards version (no changes required)
  * copyright: update upstream URL and upstream copyright date
    (closes: #753593)
  * docs: future-proof by using a glob pattern for per-family README files
  * initramfs hook: support forced installation of amd64-microcode:
    Add a config file (/etc/default/amd64-microcode) to select the mode of
    operation: do nothing, force install to initramfs, install only when
    running on an amd64 processor (closes: #726854)
  * initramfs hook: fix (likely unexploitable) issues found by shellcheck
  * Add a NEWS.Debian file to warn users we will no longer update the
    microcode on package upgrade (note that we were not doing it on any
    Debian kernels anyway).  Also document the existence of the new
    /etc/default/amd64-microcode file

 -- Henrique de Moraes Holschuh <email address hidden>  Thu, 18 Dec 2014 13:36:27 -0200
Superseded in trusty-security on 2018-06-20
Superseded in trusty-updates on 2018-06-20
Superseded in trusty-updates on 2018-01-09
Superseded in vivid-release on 2014-12-19
Obsolete in utopic-release on 2016-11-03
Published in trusty-release on 2013-10-23
Deleted in trusty-proposed (Reason: moved to release)
amd64-microcode (2.20131007.1+really20130710.1) unstable; urgency=low


  * Fix M-D-Y issue that leaked to the package version number
  * The real upstream release date is 2013-07-10

 -- Henrique de Moraes Holschuh <email address hidden>  Sat, 07 Sep 2013 22:22:00 -0300
Superseded in trusty-release on 2013-10-23
Obsolete in saucy-release on 2015-04-24
Deleted in saucy-proposed on 2015-04-28 (Reason: moved to release)
amd64-microcode (1.20120910-3) unstable; urgency=low


  * control: remove homepage and update standards-version
  * initramfs: update copyright information
  * initramfs, postinst: don't do anything on non-AMD systems (Closes: #715518)
  * initramfs, postinst: blacklist several kernel versions (Closes: #717185)
  * control: add breaks: intel-microcode (<< 1.20130222.6~)
  * load microcode module on package install/upgrade

 -- Henrique de Moraes Holschuh <email address hidden>  Sat, 20 Jul 2013 12:45:04 -0300

Available diffs

Superseded in saucy-release on 2013-07-20
Obsolete in raring-release on 2015-04-24
Deleted in raring-proposed on 2015-04-27 (Reason: moved to release)
amd64-microcode (1.20120910-2) unstable; urgency=medium


  * initramfs: work around initramfs-tools bug #688794.
    Use "_" in place of "+-." for the initramfs script name.  This works
    around a PANIC during boot when the initramfs was created in a system
    with noexec $TMPDIR.

 -- Henrique de Moraes Holschuh <email address hidden>  Tue, 09 Oct 2012 08:18:01 -0300

Available diffs

Superseded in raring-release on 2012-10-29
Obsolete in quantal-release on 2015-04-24
amd64-microcode (1.20120910-1) unstable; urgency=medium


  * AMD microcode release 20120910
    + updated microcode:
      sig 0x00600F12, id 0x06000629: errata (+) 691, 709, 740;
    + new microcode:
      sig 0x00610F01, id 0x06001119: errata 671, 686, 697, 698, 699, 704, 709,
          734, 740;
    + This update adds critical errata fixes for commonly used features.
      The hit probability of these errata is unknown to the Debian maintainer.
  * README.Debian: mention module-init-tools, not just kmod.  This is useful
    when backporting to Debian Squeeze
  * debian/control: add Vcs-* fields

 -- Henrique de Moraes Holschuh <email address hidden>  Fri, 14 Sep 2012 15:39:37 -0300

Available diffs

Superseded in quantal-release on 2012-09-17
amd64-microcode (1.20120117-2) unstable; urgency=low


  * debian/control: priority of this package should be standard,
    not extra.  All AMD-based X86 boxes should install this package
  * debian/control: update package description

 -- Henrique de Moraes Holschuh <email address hidden>  Mon, 09 Jul 2012 21:50:35 -0300

Available diffs

Superseded in quantal-release on 2012-08-05
amd64-microcode (0.20120117-1) unstable; urgency=medium


  * AMD microcode release 20120117:
    sig 0x00100F22, id 0x01000083: errata 244, 260, 280, 302, 308, 315, 342;
    sig 0x00100F23, id 0x01000083: errata 244, 260, 280, 302, 308, 315, 342;
    sig 0x00100F2A, id 0x01000084: errata 244, 260, 280, 302, 308, 315, 342;
    sig 0x00100F42, id 0x010000DB: errata 342, 440, 573;
    sig 0x00100F43, id 0x010000C8: errata 407, 440;
    sig 0x00100F52, id 0x010000DB: errata 342, 440, 573;
    sig 0x00100F53, id 0x010000C8: errata 407, 440;
    sig 0x00100F62, id 0x010000C7: errata 407, 440;
    sig 0x00100F63, id 0x010000C8: errata 407, 440;
    sig 0x00100F80, id 0x010000DA: errata 419, 440, 573;
    sig 0x00100F81, id 0x010000D9: errata 406, 407, 440, 573, 669;
    sig 0x00100F91, id 0x010000D9: errata 406, 407, 440, 573, 669;
    sig 0x00100FA0, id 0x010000DC: errata 438, 440, 573;
    sig 0x00300F10, id 0x03000027: errata 564, 573, 662, 686;
    sig 0x00500F10, id 0x05000028: errata 461, 564, 594, 595;
    sig 0x00500F20, id 0x0500010D: errata 461, 564, 594, 639, 662, 686;
    sig 0x00600F12, id 0x06000624: errata 659, 660, 661, 668, 671, 672, 673;
  * Initial upload to Debian, urgency medium because we need this in Wheezy
    to properly support AMD processors.  Closes: #676921.

 -- Henrique de Moraes Holschuh <email address hidden>  Sun, 10 Jun 2012 12:22:01 -0300
126 of 26 results