Merge tag '20251111' into debian-latest-without-microcode

This is the 20251111 release

Author: linux4life798

HP/ish/ish_lnlm_dba6b120_152c3222.bin HP/ish/ish_lnlm_12128606.binHP/ish/ish_lnlm_dba6b120_152c3222.bin renamed to HP/ish/ish_lnlm_12128606.bin

@@ -41,13 +41,17 @@ Microcode patches in microcode_amd_fam17h.bin:
 
 Microcode patches in microcode_amd_fam19h.bin:
   Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a00107a Length=5568 bytes
+  Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d5 Length=5568 bytes
   Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011de Length=5568 bytes
     Minimum base ucode version for loading: 0x0a0011d9
+  Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001238 Length=5568 bytes
   Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001247 Length=5568 bytes
     Minimum base ucode version for loading: 0x0a001242
   Family=0x19 Model=0x08 Stepping=0x02: Patch=0x0a00820d Length=5568 bytes
+  Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101148 Length=5568 bytes
   Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101158 Length=5568 bytes
     Minimum base ucode version for loading: 0x0a101153
+  Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101248 Length=5568 bytes
   Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101253 Length=5568 bytes
     Minimum base ucode version for loading: 0x0a10124e
   Family=0x19 Model=0x18 Stepping=0x01: Patch=0x0a108109 Length=5568 bytes
@@ -61,14 +65,15 @@ Microcode patches in microcode_amd_fam19h.bin:
   Family=0x19 Model=0x78 Stepping=0x00: Patch=0x0a708008 Length=5568 bytes
   Family=0x19 Model=0x7c Stepping=0x00: Patch=0x0a70c008 Length=5568 bytes
   Family=0x19 Model=0xa0 Stepping=0x01: Patch=0x0aa00116 Length=5568 bytes
+  Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00215 Length=5568 bytes
   Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa0021c Length=5568 bytes
-    Minimum base ucode version for loading: 0x0aa00219
+    Minimum base ucode version for loading: 0x0aa00218
 
 Microcode patches in microcode_amd_fam1ah.bin:
-  Family=0x1a Model=0x02 Stepping=0x01: Patch=0x0b002151 Length=14368 bytes
+  Family=0x1a Model=0x02 Stepping=0x01: Patch=0x0b00215a Length=14368 bytes
     Minimum base ucode version for loading: 0x0b002140
-  Family=0x1a Model=0x11 Stepping=0x00: Patch=0x0b10104e Length=14368 bytes
-    Minimum base ucode version for loading: 0x0b001040
+  Family=0x1a Model=0x11 Stepping=0x00: Patch=0x0b101054 Length=14368 bytes
+    Minimum base ucode version for loading: 0x0b101040
 
 NOTE: For Genoa (Family=0x19 Model=0x11) and Bergamo (Family=0x19 Model=0xa0),
 either AGESA version >= 1.0.0.8 OR a kernel with the following commit is
@@ -87,3 +92,20 @@ the required minimum patch levels to address this problem:
   Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a10123e
   Family=0x19 Model=0xa0 Stepping=0x01: Patch=0x0aa00116
   Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00212
+
+NOTE: In order to not fully abandon machines affected by AMD-SB-7033 [1] that
+have not received the BIOS update, the family 19h microcode container now
+includes a second patch for these machines that brings the microcode to the
+highest possible level without the microcode signing fix. While a BIOS update
+is highly recommended to receive the latest security updates issued after the
+microcode signing vulnerability, this will allow non-updated systems to at
+least receive some microcode updates beyond the version provided by BIOS.
+
+The list of additional patches can be seen below:
+  Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d5 Length=5568 bytes
+  Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001238 Length=5568 bytes
+  Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101148 Length=5568 bytes
+  Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101248 Length=5568 bytes
+  Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00215 Length=5568 bytes
+
+[1]: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7033.html

WHENCE

@@ -1,11 +1,11 @@
 -----BEGIN PGP SIGNATURE-----
 
-iQEzBAABCgAdFiEE/HxsUF2vzBRxg1fK5L5TOfMornMFAmiD3eIACgkQ5L5TOfMo
-rnOkvwgAhggO6cpopMTqXyyxVel1fJNfH49ZRUUVWHWBXSMR0fP7/cfbS/YwalJw
-IWrB78zIChNJWqhb3KcIucaqVrg79K396bRBVXGNXMwdpczhqGTBW/71NE1YU1lf
-0jpTXsZc8V1HgrFKKL+5LBZ2qzgAv+PeLIBPidEWTRTAgeVqFsBU6QuF3vRjiCAM
-ONtWCLa7VdCo5/EvbSEKUr6a6fOxMXzpuZTFj6wGU/zrci22M3REKG+wPjG5Ho2+
-GeIF//kQMMhcorLA0xPCUEHuctPB+UO5dgRBWK9T6RXAEqfZl+cIX3q8ScAPf+/W
-Lmie8Vr5Zoy/lWMuW46WNFFn9bqllw==
-=q09m
+iQEzBAABCgAdFiEE/HxsUF2vzBRxg1fK5L5TOfMornMFAmj4/hcACgkQ5L5TOfMo
+rnN+pAgAqw2g0/vMt82S58O5q2Ec35xqEBabSaeQkI9T2tolQmlBx45ggT8eWitf
+Wx4Oopq13lLvHNk7d7Isvi0nZ/+4yu7IoBNPqR1jkbgUOW1qmhkGK3PJROUphPGZ
+r6GPd/sRW/ugDECO7fiheqop9OzGlOwMzovSJNUDvQL8MfRK9bKUNSPmmKYLeKzw
+5cWtKKhC3AMxaCGiL4gJIXrT+SG+VxR3rMOiFLu2vYi5wJvYbutXX4GspjXPg9PV
+HjE1cQt8pgGEVmGDD47yLNttAN1OVTxf4tBcJmc9svxmFrI6f3TKU99h+fzmH/Zj
+1MGoWAW4FP8L4AEqjJkiUjof08hiVw==
+=IB2l
 -----END PGP SIGNATURE-----

amd-ucode/README

@@ -1,11 +1,11 @@
 -----BEGIN PGP SIGNATURE-----
 
-iQEzBAABCgAdFiEE/HxsUF2vzBRxg1fK5L5TOfMornMFAmiD3jQACgkQ5L5TOfMo
-rnOJZwf9HENNmjr5qG0kvAsHThYZFOy67GrGOtx79scNLoxT2N/iFL3NkVqAWYoZ
-tTO/TRGLERN0CFAZc+lYEdeXhrAVUkEutM2MD60fyn7gblH8n2d7aehpbPxsYOYH
-QhfoXSdlI8FvAEd1fYYIq329gvDoi3dlEuBdE0kKxJm8RxSCn8TofWDW/fLz3j3L
-hTuHTnZHgchkllfcKJznopq4InF9aSSK/tyUD/EFOodZKEPBKH4CHse3quE0E+sC
-JnOXv1Rva9YDluq0QW/DKjlJcBtGLRds9Vaa+BFznat45gya8KKVrL7NX1RJK139
-WLkEF7CzUw1BZwwWAVnqeGNeNZEP2g==
-=rtof
+iQEyBAABCgAdFiEE/HxsUF2vzBRxg1fK5L5TOfMornMFAmj/m4oACgkQ5L5TOfMo
+rnOIJQf1FOivkaaO9uRfusQX9nHaYllKJ8lg0DpX9cYwaxbHd85s5KE3BtmFij6x
+bVvZHQo+xPTsOtMxU/M5EDMS5zy1N4mZLHC4p8k7w5RmRuvBlokLKMmQ5DS84SbQ
+3nGyEQyRO6PJ3iU4VOTiuWBgQdzd7CfgPTPO7g9Rw1fkRrGHeTS1Se+W3LOmjRlC
+1j/Wbt0Jx9UnwtEW+mkAOWsfVQBMRny0US+6P6J2+RJjiA/eMeSqjWJi42drwG0E
+vyhsMqA5SxxmtyrzArxmZpRNckkpz5bGb5g+FguFYRxgrPGlUgQD8xqHAb9W0g/V
+40sidEDsYNGiV1dyAqKqJuJEVHaV
+=QN1N
 -----END PGP SIGNATURE-----