So another new post, another new firmware update? You bet it is!

Early this month, Lenovo just released another BIOS firmware for ThinkPad P1 Gen 1. It looks like Lenovo has fixed a few bugs comparing to the the previous firmware release in March.

CHANGES IN THIS RELEASE
  Version 1.28

[Important updates]
- Addresses CVE-2019-0154 (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2019-0154)
  Refer to Lenovo's Security Advisory page for additional information about 
  LEN-27714 "Multi-vendor BIOS Security Vulnerabilities"
  (https://support.lenovo.com/us/en/product_security/LEN-27714)
- Addresses CVE-2020-0548 (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0548)
- Addresses CVE-2020-0549 (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0549)
- Addresses CVE-2020-0543 (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0543)

[New functions or enhancements]
- Updated the CPU microcode.

[Problem fixes]
- Fixed an issue where system might hang after Intel AMT Control is set
  to Disabled by ThinkPad Setup.

Let’s update the firmware, shall we?

[root@benjo ~]# fwupdmgr update
Upgrade available for Thunderbolt Controller from 39.00 to 50.00
Thunderbolt Controller and all connected devices may not be usable while updating. Continue with update? [Y|n]: 
Downloading 50.00 for Thunderbolt Controller...
Fetching firmware https://fwupd.org/downloads/0a766247f624990bce53659614f12684942fd83a5353d52059f657fcf333cb9a-Lenovo-ThinkPad-P1-Thunderbolt-Firmware-N2ETF15W-Secured.cab
Downloading…             [***************************************] Less than one minute remaining…
Decompressing…           [***************************************]
Authenticating…          [***************************************]
Updating Thunderbolt Controller…                                 ]
Restarting device…       [***************************************]
Successfully installed firmware
• INTEL SSDPEKKF512G8L has no available firmware updates
Upgrade available for System Firmware from 0.1.27 to 0.1.28
20MDCTO1WW must remain plugged into a power source for the duration of the update to avoid damage. Continue with update? [Y|n]: 
Downloading 0.1.28 for System Firmware...
Fetching firmware https://fwupd.org/downloads/e6136359963843c2a294aa16cc2c8ac83d9d4d3f98f11b9c26e2800be8b6bbb4-Lenovo-ThinkPad-P1X1Extreme-SystemFirmware-0.1.28.cab
Downloading…             [***************************************] Less than one minute remaining…
Decompressing…           [***************************************]
Authenticating…          [***************************************]
Updating System Firmware…[***************************************]
Scheduling…              [***************************************]
Successfully installed firmware
• UEFI Device Firmware has the latest available firmware version
• UEFI Device Firmware has the latest available firmware version
• UEFI Device Firmware has no available firmware updates

An update requires a reboot to complete. Restart now? [y|N]: :

There is no problem after rebooting.

References: