bios

Lenovo released the firmeware v1.33 for ThinkPad P1 Gen1 recently which addressed many CVEs. CHANGES IN THIS RELEASE Version 1.33 [Important updates] - Update includes a security fix. - Addresses CVE-2020-0587, CVE-2020-0588, CVE-2020-0590, CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0587) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0588) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0590) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0591) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0592) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0593) [New functions or enhancements] - Updated the Diagnostics module to version 04.15.000. [Problem fixes] - Nothing It’s worth noting that this 1.33 version is not yet available via fwupdmgr....

Dell just released a new BIOS firmware of the Latitude 7400 series. This firmware was released on 23 Nov 2020. Fixes: Modified the default settings of the Intel Rapid Storage Technology driver. Firmware updates to address the Intel Technical Advisory INTEL-TA-00391 (CVE-2020-8753, CVE-2020-8745, CVE-2020-8705, CVE-2020-8757, CVE-2020-8756, CVE-2020-8760, CVE-2020-8751, CVE-2020-8754, CVE-2020-8747, CVE-2020-8746, CVE-2020-8749 CVE-2020-8752, CVE-2020-12303, CVE-2020-12355, and CVE-2020-12356). Firmware updates to address the Intel Security Advisory INTEL-SA-00358 (CVE-2020-0587, CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593)....

Are you still rocking your X1 Carbon Gen 6 in 2020? Well, Lenovo just released a new BIOS firmware 1.50. Here are changes in this release: [Important updates] - Update includes a security fix. - Addresses CVE-2020-8696 and CVE-2020-8698. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8696) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8698) - Addresses CVE-2020-0587, CVE-2020-0588, CVE-2020-0590, CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0587) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0588) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0590) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0591) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0592) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0593) [New functions or enhancements] - Updated the CPU microcode. - Updated the Diagnostics module to version 04....

Lenovo just released a new BIOS firmware for its ThinkPad P1 Gen 1, v1.32. This version fixes a few issues, as well as update the CPU microcode. Here is the changes from Lenovo’s website. CHANGES IN THIS RELEASE Version 1.32 [Important updates] - Addresses CVE-2020-8696, CVE-2020-8698 - Addresses CVE-2020-8694, CVE-2020-8695 [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Fixed an issue where system might hang up at POST when some KVM device was connected....

Just found out that Dell just released the a new firmware, 1.10.1, for the Latitude 7400 series. This firmeware was released since 10 Sep 2020. Fixes: Firmware updates to address the Intel Technical Advisory INTEL-TA-00404 (CVE-2020-8758). Fixed the issue where an error message stating Key Mapping for Console Redirection BIOS is displayed before the Dell logo screen, Enhancements: Updated the Embedded Controller Engine firmware. I’m running Fedora 32 on this laptop....

A quick note to remind ThinkPad X1 Carbon 6 users that Lenovo just released a new firmware for the Thunderbolt on this laptop. And, it’s available via fwupd if you run Fedora (possibly also available on Ubuntu). [root@benji ~]# fwupdmgr update • Thunderbolt Controller has the latest available firmware version Upgrade available for Embedded Controller from 0.1.20 to 0.1.21 20KHCTO1WW must remain plugged into a power source for the duration of the update to avoid damage....

It seems like Lenovo releases a new BIOS firmeware every month for its ThinkPad, at least for the ThinkPad P1 Gen1. On July 21, the BIOS firmware version 1.31 was released. CHANGES IN THIS RELEASE Version 1.31 [Important updates] - Address CVE-2020-0548, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0548) - Address CVE-2020-0549, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0549) - Address CVE-2020-0543, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0543) [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Fixed an issue where Force PXE boot by Intel AMT did not work....

Update BIOS firmware version 1.9.1 is available for Dell Latitude 7400. This firmware was released on 30 June 2020. It is marked Urgent and contains the following fixes and enhancements: Fixes: Fixed the issue where the system cannot detect the Intel Software Guard Extensions (SGX) device when SGX is enabled. Firmware updates to address security advisory INTEL-SA-00295 (CVE-2020-0531, CVE-2020-0532, CVE-2020-0533, CVE-2020-0535, CVE-2020-0536, CVE-2020-0537, CVE-2020-0538, CVE-2020-0539, CVE-2020-0540, CVE-2020-0545, CVE-2020-0594, CVE-2020-0595, CVE-2020-0596, and CVE-2020-8674)....

Dell released a new BIOS firmware version 1.7.4 for the Latitude 7300 and 7400 on May 22, 2020. This release is again marked Urgent and contains the following fixes and enhancements: Fixes: Firmware updated to address CVE-2020-5363 Enhancements: Updated the Embedded Controller Engine Firmware This version 1.7.4 is already available on Fedora 32 via fwupdmgr tool. [root@matht436 ~]# fwupdmgr refresh Fetching signature https://cdn.fwupd.org/downloads/firmware.xml.gz.jcat Downloading… [***************************************] Fetching metadata https://cdn.fwupd.org/downloads/firmware-00558-stable.xml.gz Downloading… [***************************************] Successfully downloaded new metadata: 1 local device supported [root@matht436 ~]# fwupdmgr update • Thunderbolt Controller has no available firmware updates • SSDPEKKF512G8 NVMe INTEL 512GB has no available firmware updates Upgrade available for System Firmware from 1....

Lenovo just released an updated BIOS firmware version 1.30 for ThinkPad P1 Gen1 on June 3rd. The changes in this v1.30 release are: CHANGES IN THIS RELEASE Version 1.30 [Important updates] - Update includes a security fix. - Address CVE-2020-0529, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0529) - Address CVE-2020-0528, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0528) [New functions or enhancements] - Updated the Diagnostics module to version 04.12.001. [Problem fixes] - Fixed an issue where USB keyboard connected via Thunderbolt WS Dock might not be used at BIOS POST....