{"id":56750,"date":"2020-07-09T09:38:42","date_gmt":"2020-07-09T07:38:42","guid":{"rendered":"https:\/\/www.planet3dnow.de\/cms\/?p=56750"},"modified":"2020-07-09T09:38:42","modified_gmt":"2020-07-09T07:38:42","slug":"agesa-combo-am4v2pi-1-0-0-2-und-combo-am4-1-0-0-6-schliessen-sicherheitsluecke-bei-amd-apus","status":"publish","type":"post","link":"https:\/\/www.planet3dnow.de\/cms\/56750-agesa-combo-am4v2pi-1-0-0-2-und-combo-am4-1-0-0-6-schliessen-sicherheitsluecke-bei-amd-apus\/","title":{"rendered":"AGESA<\/span> Combo-AM4v2PI 1.0.0.2 und Combo-AM4 1.0.0.6 schlie\u00dfen Sicherheitsl\u00fccke bei AMD-APUs"},"content":{"rendered":"

In einer Pres\u00adse\u00admit\u00adtei\u00adlung<\/a> hat Giga\u00adbyte bekannt gege\u00adben, dass die AGE\u00adSA-Ver\u00adsio\u00adnen Com\u00adbo-AM4\u00adv2PI 1.0.0.2 und Com\u00adbo-AM4 1.0.0.6 f\u00fcr AMDs AM4-Main\u00adboards eine im Juni bekannt gewor\u00adde\u00adne Sicher\u00adheits\u00adl\u00fc\u00adcke \u2014 SMM<\/span> Call\u00adout Pri\u00advi\u00adle\u00adge Escala\u00adti\u00adon<\/a> (CVE-2020<\/span>\u201312890)- schlie\u00ad\u00dfen. Die\u00adse hat nach Anga\u00adben von AMD<\/span> nur Pro\u00adzes\u00adso\u00adren mit inte\u00adgrier\u00adter Gra\u00adfik (APUs) betrof\u00adfen, die zwi\u00adschen 2016 und 2019 vor\u00adge\u00adstellt wurden.<\/p>\n

SMM<\/span> Callout Privilege Escalation<\/h3>\n

Die SMM<\/span> Call\u00adout Pri\u00advi\u00adle\u00adge Escala\u00adti\u00adon<\/a> (CVE-2020<\/span>\u201312890<\/a>) ben\u00f6\u00adtigt einen phy\u00adsi\u00adschen Zugang oder Admi\u00adnis\u00adtra\u00adtor\u00adbe\u00adrech\u00adti\u00adgun\u00adgen und erm\u00f6g\u00adlicht die Mani\u00adpu\u00adla\u00adti\u00adon der AMD<\/span> Gene\u00adric Encap\u00adsu\u00adla\u00adted Sys\u00adtem Archi\u00adtec\u00adtu\u00adre (AGESA<\/span>) wodurch belie\u00adbi\u00adger Code aus\u00adge\u00adf\u00fchrt wer\u00adden kann. <\/p>\n

\u201c<\/span>AMD<\/span> belie\u00adves this only impacts cer\u00adtain cli\u00adent and embedded APU<\/span> pro\u00adces\u00adsors laun\u00adched bet\u00adween 2016 and 2019. AMD<\/span> has deli\u00adver\u00aded the majo\u00adri\u00adty of the updated ver\u00adsi\u00adons of AGESA<\/span> to our mother\u00adboard part\u00adners and plans to deli\u00adver the remai\u00adning ver\u00adsi\u00adons by the end of June 2020. AMD<\/span> recom\u00admends fol\u00adlo\u00adwing the secu\u00adri\u00adty best prac\u00adti\u00adce of kee\u00adping devices up-to-date with the latest patches. End users with ques\u00adti\u00adons about whe\u00adther their sys\u00adtem is run\u00adning on the\u00adse latest ver\u00adsi\u00adons should cont\u00adact their mother\u00adboard or ori\u00adgi\u00adnal equipment\/system manufacturer.\u201d<\/p><\/blockquote>\n

AMD<\/span> woll\u00adte bis Ende Juni neue AGE\u00adSA-Ver\u00adsio\u00adnen bereit\u00adstel\u00adlen, die die\u00adse L\u00fccke schlie\u00dfen.<\/p>\n

Gigabyte will bis Ende Juli alle Mainboards versorgen<\/strong><\/h3>\n

In der erw\u00e4hn\u00adten Pres\u00adse\u00admit\u00adtei\u00adlung<\/a> hat Giga\u00adbyte bekannt gege\u00adben, dass man auf Basis der neu\u00aden AGE\u00adSA-Ver\u00adsio\u00adnen BIOS-Updates f\u00fcr sei\u00adne AMD<\/span> Main\u00adboards bereit\u00adstel\u00adlen wird. Dabei wer\u00adden zuerst Main\u00adboards mit dem X570<\/span> und B550<\/span> bis Mit\u00adte Juli ver\u00adsorgt \u2014 ent\u00adspre\u00adchen\u00adde Beta-Ver\u00adsio\u00adnen ste\u00adhen bereits bereit. Alle ande\u00adren Main\u00adboards sol\u00adlen das Update dann bis Ende Juli erhal\u00adten. Beta-Ver\u00adsio\u00adnen soll es aber auch bereits Mit\u00adte Juli geben.<\/p>\n

ASRock liefert Updates bereits auch f\u00fcr B450<\/span><\/strong><\/h3>\n

Bei ASRock wer\u00adden die X570-Main\u00adboards bereits Anfang Juli mit dem Com\u00adbo-AM4\u00adv2PI 1.0.0.2 ver\u00adsorgt. Das Com\u00adbo-AM4 1.0.0.6 ist f\u00fcr Main\u00adboards mit dem B550<\/span> bereits seit Juni ver\u00adf\u00fcg\u00adbar. Mit dem ASRock Fatal1ty B450<\/span> Gam\u00ading K4<\/span><\/a> hat auch bereits ein Main\u00adboard mit dem B450-Chip\u00adsatz ein BIOS-Update auf Basis des Com\u00adbo-AM4 1.0.0.6 erhalten.<\/p>\n

Was ist AGESA<\/span>?<\/strong><\/h3>\n

AGESA<\/span> steht f\u00fcr AMD<\/span> Gene\u00adric Encap\u00adsu\u00adla\u00adted Sys\u00adtem Archi\u00adtec\u00adtu\u00adre und bil\u00addet das Grund\u00adge\u00adr\u00fcst zur Initia\u00adli\u00adsie\u00adrung von AMD-Pro\u00adzes\u00adso\u00adren in der Pha\u00adse des Power-On-Self-Test (POST<\/span>) nach dem Ein\u00adschal\u00adten des Sys\u00adtems. Dar\u00adauf basie\u00adrend ent\u00adwi\u00adckeln die Main\u00adboard-Her\u00adstel\u00adler ihre Firm\u00adware (ali\u00adas BIOS<\/span> ali\u00adas UEFI<\/span>), aller\u00addings immer auf Basis einer von AMD<\/span> her\u00adaus\u00adge\u00adge\u00adbe\u00adnen AGESA-Version.<\/p>\n

AGESA-Versionen im \u00dcberblick<\/strong><\/h3>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
AGE\u00adSA-Ver\u00adsi\u00adon<\/th>\nVer\u00adbes\u00adse\u00adrun\u00adgen<\/th>\nBesonderheiten\/Probleme<\/th>\n<\/tr>\n<\/thead>\n
Pin\u00adna\u00adcl\u00adePi-AM4 1.0.0.2<\/td>\n\n
    \n
  • Spect\u00adre-v2-Schutz<\/li>\n<\/ul>\n<\/td>\n
 <\/td>\n<\/tr>\n
Pin\u00adna\u00adcl\u00adePi-AM4 1.0.0.2a<\/td>\n\n
    \n
  • Fix Power\u00adma\u00adnage\u00adment \u201cRaven Ridge\u201d-APU<\/li>\n<\/ul>\n<\/td>\n
 <\/td>\n<\/tr>\n
Pin\u00adna\u00adcl\u00adePi-AM4 1.0.0.6<\/td>\n\n
    \n
  • Sup\u00adport bis Ryzen 2000<\/li>\n<\/ul>\n<\/td>\n
Over\u00adclo\u00adcking Ath\u00adlon 200GE<\/span>?<\/td>\n<\/tr>\n
Com\u00adbo-AM4 0.0.7.2<\/td>\n\n
    \n
  • Sup\u00adport f\u00fcr Picas\u00adso und vor\u00adl\u00e4u\u00adfi\u00adger f\u00fcr Matisse<\/li>\n<\/ul>\n<\/td>\n
Teil\u00adwei\u00adse Pro\u00adble\u00adme mit PBO<\/span>\/SMT<\/span><\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.1<\/td>\n\n
    \n
  • vol\u00adler Sup\u00adport f\u00fcr Matisse<\/li>\n<\/ul>\n<\/td>\n
 <\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.2<\/td>\n\n
    \n
  • Ver\u00adbes\u00adse\u00adrung RAM-Sup\u00adport\/-Mul\u00adti\u00adpli\u00adka\u00adtor<\/li>\n<\/ul>\n<\/td>\n
 <\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.3<\/td>\n\n
    \n
  • Per\u00adfor\u00admance\u00adver\u00adbes\u00adse\u00adrung f\u00fcr Ryzen 9<\/li>\n
  • Kom\u00adpa\u00adti\u00adbi\u00adli\u00adt\u00e4t mit DDR4-3000<\/span> und h\u00f6her verbessert<\/li>\n<\/ul>\n<\/td>\n
Pro\u00adble\u00adme mit Core-Boost<\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.3a<\/td>\n\n
    \n
  • Ver\u00adbes\u00adse\u00adrung des Core-Boost?<\/li>\n<\/ul>\n<\/td>\n
alle Funk\u00adtio\u00adnen nur mit 32-MB-BIOS<\/span><\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.3ab<\/td>\n\n
    \n
  • Ver\u00adbes\u00adse\u00adrung des Core-Boost? \/ Fix f\u00fcr M2<\/span>.SSD<\/span><\/li>\n<\/ul>\n<\/td>\n
 <\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.3aba<\/td>\n\n
    \n
  • Fix der Zufallls\u00adzah\u00adlen f\u00fcr sys\u00adtemd und Desti\u00adny 2<\/li>\n<\/ul>\n<\/td>\n
Zur\u00fcck\u00adge\u00adzo\u00adgen wegen PCIe<\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.3abb<\/td>\n\n
    \n
  • Fix der Zufallls\u00adzah\u00adlen f\u00fcr sys\u00adtemd und Desti\u00adny 2<\/li>\n
  • War\u00adnun\u00adgen \u201cEvent 17, WHEA-Log\u00adger\u201d im Win\u00addows Event Log beseitigt<\/li>\n<\/ul>\n<\/td>\n
 <\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.3abba<\/td>\n\n
    \n
  • Boost 25\u201350 MHz h\u00f6her<\/li>\n
  • Acti\u00advi\u00adty Fil\u00adter f\u00fcr leich\u00adte Workloads<\/li>\n<\/ul>\n<\/td>\n
 <\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.4b<\/td>\n\n <\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.5<\/td>\n\n
    \n
  • Behebt einen Feh\u00adler bei der PCI-Lane Kon\u00adfi\u00adgu\u00adra\u00adti\u00adon des AMD<\/span> Ryzen 3 PRO<\/span> 2100GE<\/span><\/li>\n
  • Behebt einen spo\u00adra\u00addi\u00adschen Vir\u00adtu\u00adal Memo\u00adry Feh\u00adler in Kom\u00adbi\u00adna\u00adti\u00adon mit Real\u00adtek Onboard-LAN<\/li>\n
  • Ver\u00adbes\u00adser\u00adter POST<\/span> mit Spei\u00adcher\u00admo\u00addu\u00adlen auf Basis von Micron DDR4-3200<\/span> Chips<\/li>\n
  • Opti\u00admier\u00adte PCIe-Firm\u00adware f\u00fcr ver\u00adbes\u00adser\u00adte Sta\u00adbi\u00adli\u00adt\u00e4t und Kompatibilit\u00e4t<\/li>\n<\/ul>\n<\/td>\n
 <\/td>\n<\/tr>\n
Com\u00adbo-AM4 1.0.0.6<\/td>\n\n <\/td>\n<\/tr>\n
Com\u00adbo-AM4\u00adv2Pi **<\/strong><\/td>\n<\/tr>\n
Com\u00adbo-AM4\u00adv2Pi 1.0.0.0<\/td>\n\n
    \n
  • Initia\u00adles BIOS<\/span> f\u00fcr B550-Mainboards<\/li>\n
  • CPU-Sup\u00adport nur Matis\u00adse und j\u00fcnger<\/li>\n<\/ul>\n<\/td>\n
 <\/td>\n<\/tr>\n
Com\u00adbo-AM4\u00adv2Pi 1.0.0.1<\/td>\n?<\/td>\n <\/td>\n<\/tr>\n
Com\u00adbo-AM4\u00adv2Pi 1.0.0.2<\/td>\n\n <\/td>\n<\/tr>\n
* Alle Anga\u00adben sind mehr oder weni\u00adger inof\u00adfi\u00adzi\u00adell, da AMD<\/span> nicht f\u00fcr alle AGE\u00adSAs Infor\u00adma\u00adtio\u00adnen ver\u00f6ffentlicht.\n

** Schwer\u00adpunkt bei v2 liegt auf den aktu\u00adel\u00adlen und k\u00fcnf\u00adti\u00adgen Ryzen-Gene\u00adra\u00adtio\u00adnen f\u00fcr B550-Boards, w\u00e4h\u00adrend die \u201calte\u201d Schie\u00adne auch die Ur-Ryzens ber\u00fcck\u00adsich\u00adti\u00adgen muss. Denn AMD<\/span> ist ja nur dahin\u00adge\u00adhend zur\u00fcck\u00adge\u00adru\u00addert, dass Zen 3 auch von \u00e4lte\u00adren Main\u00adboards unter\u00adst\u00fctzt wer\u00adden wird<\/a>. Umge\u00adkehrt sol\u00adlen auf B550er-Main\u00adboards nur Matis\u00adse auf\u00adw\u00e4rts (Renoir, Ver\u00admeer, etc.) lauf\u00adf\u00e4\u00adhig sein.<\/p><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"

In einer Pres\u00adse\u00admit\u00adtei\u00adlung<\/a> hat Giga\u00adbyte bekannt gege\u00adben, dass die AGE\u00adSA-Ver\u00adsio\u00adnen Com\u00adbo-AM4\u00adv2PI 1.0.0.2 und Com\u00adbo-AM4 1.0.0.6 f\u00fcr AMDs AM4-Main\u00adboards eine im Juni bekannt gewor\u00adde\u00adne Sicher\u00adheits\u00adl\u00fc\u00adcke \u2014 SMM<\/span> Call\u00adout Pri\u00advi\u00adle\u00adge Escala\u00adti\u00adon<\/a> (CVE-2020<\/span>\u201312890)- schlie\u00ad\u00dfen. Die\u00adse hat nach Anga\u00adben von AMD<\/span> nur Pro\u00adzes\u00adso\u00adren mit inte\u00adgrier\u00adter Gra\u00adfik (APUs) betrof\u00adfen, die zwi\u00adschen 2016 und 2019 vor\u00adge\u00adstellt wur\u00adden. (\u2026) Wei\u00adter\u00adle\u00adsen \u00bb<\/a><\/p>\n","protected":false},"author":593,"featured_media":29295,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"ngg_post_thumbnail":0,"footnotes":""},"categories":[12,11],"tags":[1265,966,1335,2303,2304,2333],"class_list":["post-56750","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aktuelles","category-news","tag-agesa","tag-amd","tag-bios","tag-combo-am4","tag-combo-am4v2","tag-security-fix","entry"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts\/56750","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/users\/593"}],"replies":[{"embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/comments?post=56750"}],"version-history":[{"count":1,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts\/56750\/revisions"}],"predecessor-version":[{"id":56751,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts\/56750\/revisions\/56751"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/media\/29295"}],"wp:attachment":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/media?parent=56750"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/categories?post=56750"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/tags?post=56750"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}