1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
|
amd64-microcode (2.20141028.1) unstable; urgency=medium
* Upstream release 20141028 built from linux-firmware:
+ Updated microcode patches for family 0x15 processors
+ Added microcode patches for family 0x16 processors
* AMD did not update the relevant microcode documentation (errata fixed,
microcode patch levels, etc), so there is no documentation for the
family 0x16 microcode patches, and the documentation for family 0x15 is
stale.
* postinst: do not update microcode on upgrades:
Remove code that triggers a microcode update on package upgrade. The
resulting postinst script is now identical to the one in Debian jessie's
intel-microcode, and thus known-good.
NOTE: this code was already disabled for the majority of the users due
to Debian bug #723975 (closes: #723975, #723081)
* kpreinst: remove, we don't update microcode on postinst anymore
* blacklist automated loading of the microcode module:
This is in line with the desired behavior of only updating microcode
*automatically* during system boot, when it is safer to do so. The
local admin can still load the microcode module and update the microcode
manually at any time, of course. This is in sync with the intel-microcode
packages in Debian jessie, which will also blacklist the microcode module.
Note that the initramfs will force-load the microcode module in a safe
condition, the blacklist avoids module autoloading outside the initramfs
* control: bump standards version (no changes required)
* copyright: update upstream URL and upstream copyright date
(closes: #753593)
* docs: future-proof by using a glob pattern for per-family README files
* initramfs hook: support forced installation of amd64-microcode:
Add a config file (/etc/default/amd64-microcode) to select the mode of
operation: do nothing, force install to initramfs, install only when
running on an amd64 processor (closes: #726854)
* initramfs hook: fix (likely unexploitable) issues found by shellcheck
* Add a NEWS.Debian file to warn users we will no longer update the
microcode on package upgrade (note that we were not doing it on any
Debian kernels anyway). Also document the existence of the new
/etc/default/amd64-microcode file
-- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 18 Dec 2014 13:36:27 -0200
amd64-microcode (2.20131007.1+really20130710.1) unstable; urgency=low
* Fix M-D-Y issue that leaked to the package version number
* The real upstream release date is 2013-07-10
-- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 07 Sep 2013 22:22:00 -0300
amd64-microcode (2.20131007.1) unstable; urgency=low
* New upstream release, received through linux-firmware and LKML
+ updated microcode:
sig 0x00500F10, id 0x05000029: erratum (+) 784;
sig 0x00500F20, id 0x05000119: erratum (+) 784;
sig 0x00600F12, id 0x0600063D: errata (-) 668, (+) 759, 778;
+ new microcode:
sig 0x00200F31, id 0x02000032: errata 311, 316;
sig 0x00600F20, id 0x06000822: errata 691, 699, 704, 708, 709, 734,
740, 778;
+ This update fixes important processor bugs that cause data corruption
or unpredictable system behaviour. It also fixes a performance issue
and several issues that cause system lockup.
* Switch to native package, since there is no upstream tarball
-- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 07 Sep 2013 15:22:09 -0300
amd64-microcode (2.20120910-1) unstable; urgency=high
* debian/control: update Breaks for new intel-microcode version scheme
* Bump major version number, this will allow us to also update the stable
branch of amd64-microcode in the future without clashing with the stable
branch of intel-microcode. The real issue is that amd64-microcode
1.20120910-3 and intel-microcode 1.20130222.6 have changed (in lockstep)
to a different initramfs cooperation protocol, but I failed to bump the
major version at that time
* Urgency high to avoid delaying a series of high-priority intel-microcode
updates being done at the moment: we need this version in testing before
I can upload stable backports of intel-microcode or amd64-microcode
-- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 18 Aug 2013 16:19:42 -0300
amd64-microcode (1.20120910-3) unstable; urgency=low
* control: remove homepage and update standards-version
* initramfs: update copyright information
* initramfs, postinst: don't do anything on non-AMD systems (Closes: #715518)
* initramfs, postinst: blacklist several kernel versions (Closes: #717185)
* control: add breaks: intel-microcode (<< 1.20130222.6~)
* load microcode module on package install/upgrade
-- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 20 Jul 2013 12:45:04 -0300
amd64-microcode (1.20120910-2) unstable; urgency=medium
* initramfs: work around initramfs-tools bug #688794.
Use "_" in place of "+-." for the initramfs script name. This works
around a PANIC during boot when the initramfs was created in a system
with noexec $TMPDIR.
-- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 09 Oct 2012 08:18:01 -0300
amd64-microcode (1.20120910-1) unstable; urgency=medium
* AMD microcode release 20120910
+ updated microcode:
sig 0x00600F12, id 0x06000629: errata (+) 691, 709, 740;
+ new microcode:
sig 0x00610F01, id 0x06001119: errata 671, 686, 697, 698, 699, 704, 709,
734, 740;
+ This update adds critical errata fixes for commonly used features.
The hit probability of these errata is unknown to the Debian maintainer.
* README.Debian: mention module-init-tools, not just kmod. This is useful
when backporting to Debian Squeeze
* debian/control: add Vcs-* fields
-- Henrique de Moraes Holschuh <hmh@debian.org> Fri, 14 Sep 2012 15:39:37 -0300
amd64-microcode (1.20120117-2) unstable; urgency=low
* debian/control: priority of this package should be standard,
not extra. All AMD-based X86 boxes should install this package
* debian/control: update package description
-- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 09 Jul 2012 21:50:35 -0300
amd64-microcode (1.20120117-1) unstable; urgency=low
* Update ABI (first component of package version) to 1, to match
the ABI of intel-microcode packages with /lib/firmware support
* Update online processor cores and the initramfs image on package
upgrade and the initramfs on package removal
* Install initramfs-tools helpers to handle boot-time microcode
updates
* README.Debian: describe supported mod/built-in configs
-- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 09 Jul 2012 19:31:47 -0300
amd64-microcode (0.20120117-1) unstable; urgency=medium
* AMD microcode release 20120117:
sig 0x00100F22, id 0x01000083: errata 244, 260, 280, 302, 308, 315, 342;
sig 0x00100F23, id 0x01000083: errata 244, 260, 280, 302, 308, 315, 342;
sig 0x00100F2A, id 0x01000084: errata 244, 260, 280, 302, 308, 315, 342;
sig 0x00100F42, id 0x010000DB: errata 342, 440, 573;
sig 0x00100F43, id 0x010000C8: errata 407, 440;
sig 0x00100F52, id 0x010000DB: errata 342, 440, 573;
sig 0x00100F53, id 0x010000C8: errata 407, 440;
sig 0x00100F62, id 0x010000C7: errata 407, 440;
sig 0x00100F63, id 0x010000C8: errata 407, 440;
sig 0x00100F80, id 0x010000DA: errata 419, 440, 573;
sig 0x00100F81, id 0x010000D9: errata 406, 407, 440, 573, 669;
sig 0x00100F91, id 0x010000D9: errata 406, 407, 440, 573, 669;
sig 0x00100FA0, id 0x010000DC: errata 438, 440, 573;
sig 0x00300F10, id 0x03000027: errata 564, 573, 662, 686;
sig 0x00500F10, id 0x05000028: errata 461, 564, 594, 595;
sig 0x00500F20, id 0x0500010D: errata 461, 564, 594, 639, 662, 686;
sig 0x00600F12, id 0x06000624: errata 659, 660, 661, 668, 671, 672, 673;
* Initial upload to Debian, urgency medium because we need this in Wheezy
to properly support AMD processors. Closes: #676921.
-- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 10 Jun 2012 12:22:01 -0300
|
