Several ASrock boards now have bios updates that contain AGESA 1.2.0.A - .e.g.:
https://download.asrock.com/BIOS/AM4/X300M-STX(1.80E)ROM.zip
https://download.asrock.com/BIOS/AM4/X300-ITX(1.40E)ROM.zip
Is it an official version from AMD or something that ASRock cobbled together? Does it contain all the security fixes of 1.2.0.8?
It's a utility built into the BIOS of later AMD platforms.
(AMD Generic Encapsulated Software Architecture) - basically controls CPU, RAM etc. It's updated by updating your BIOS.
https://forums.tomshardware.com/threads/amd-what-is-agesa.3496824/post-21134320
Asrock has a support forum, ask them.
And your links are direct downloads, not to product page.
Sorry, but that isn't the question. I know what AGESA is well. I am asking about the specific version - 1.2.0.A.
AMD have not released officially such a version. The latest official AMD GA version is 1.2.0.8. The question is how 1.2.0.A compare to 1.2.0.8, and whether or not it is an official GA release, and OEM specific RA release, or does it even come from AMD in the first place.
As to why not ask Asrock - already asked the asrock support - they say it is an agesa update, and that is all they say. Supposedly only AMD has the keys to sign agesa, but this version seems weird.
1.2.0.A really is the official successor to 1.2.0.8 which does not saw such a widespread use on AM4. Right now there are not many public posts about it, but as Allen said, it contains a LOT of security fixes and mitigations and some other improvements. I still don't see an official changelog, though, which I really would like to see.
In this regard they really must improve, I don't want to gather GitHub, multiple forums etc. for a full changelog beside the security bulletins.
It's an official version from AMD.
It contains all of published security fixes.
https://www.amd.com/en/resources/product-security.html#security
Check affected product and mitigation in Security Bulletins.
I mean, he simply asked what this version is about or what is contains (changelog?). And im pretty interested in it too. AGESA is from AMD, so what is the problem here to be transparent and showing the users what is different from version to version like every other developer does? They also do it for their graphic drivers, why they dont want to tell the people about the details from AGESA?
That's really not too much to ask.