Firmware

Lenovo released the firmeware v1.33 for ThinkPad P1 Gen1 recently which addressed many CVEs. CHANGES IN THIS RELEASE Version 1.33 [Important updates] - Update includes a security fix. - Addresses CVE-2020-0587, CVE-2020-0588, CVE-2020-0590, CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0587) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0588) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0590) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0591) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0592) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0593) [New functions or enhancements] - Updated the Diagnostics module to version 04.15.000. [Problem fixes] - Nothing It’s worth noting that this 1.33 version is not yet available via fwupdmgr. So to update it, just download the firmeware zip file from Lenovo website. Then, manually install it. There are 2 files in the zip, and I only need to install 1 of them. ...

I like to keep the firmware running on all my devices up to date. New firmware is released to do to main things: fixing bugs and feature enhancing. Today, I just found out that the modem/router provided by my ISP is running and out of date firmware. The installed firmware is NF18ACV.NC.AU-R6B016.EN released on 2018/05/14. There have been a few new versions of firmware released between then and now, with the latest version being: NC2-R6B021 released on 2020/11/26. ...

Dell just released a new BIOS firmware of the Latitude 7400 series. This firmware was released on 23 Nov 2020. Fixes: Modified the default settings of the Intel Rapid Storage Technology driver. Firmware updates to address the Intel Technical Advisory INTEL-TA-00391 (CVE-2020-8753, CVE-2020-8745, CVE-2020-8705, CVE-2020-8757, CVE-2020-8756, CVE-2020-8760, CVE-2020-8751, CVE-2020-8754, CVE-2020-8747, CVE-2020-8746, CVE-2020-8749 CVE-2020-8752, CVE-2020-12303, CVE-2020-12355, and CVE-2020-12356). Firmware updates to address the Intel Security Advisory INTEL-SA-00358 (CVE-2020-0587, CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593). Firmware updates to address the Intel Security Advisory INTEL-SA-00381 (CVE-2020-8696 and CVE-2020-8698). Firmware updates to address the Intel Security Advisory INTEL-SA-00389 (CVE-2020-8694 and CVE-2020-8695). Firmware update to address CVE-2020-26189. Enhancements: ...

Are you still rocking your X1 Carbon Gen 6 in 2020? Well, Lenovo just released a new BIOS firmware 1.50. Here are changes in this release: [Important updates] - Update includes a security fix. - Addresses CVE-2020-8696 and CVE-2020-8698. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8696) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8698) - Addresses CVE-2020-0587, CVE-2020-0588, CVE-2020-0590, CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0587) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0588) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0590) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0591) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0592) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0593) [New functions or enhancements] - Updated the CPU microcode. - Updated the Diagnostics module to version 04.15.000. [Problem fixes] Nothing. It’s worth to note that this new firmware is available on Fedora (33) via fwupdmgr. ...

Lenovo just released a new BIOS firmware for its ThinkPad P1 Gen 1, v1.32. This version fixes a few issues, as well as update the CPU microcode. Here is the changes from Lenovo’s website. CHANGES IN THIS RELEASE Version 1.32 [Important updates] - Addresses CVE-2020-8696, CVE-2020-8698 - Addresses CVE-2020-8694, CVE-2020-8695 [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Fixed an issue where system might hang up at POST when some KVM device was connected. - Fixed an issue where the screen might not be displayed on Thinkpad LCD when opened lid just before startup Windows. - Fixed an issue where system might not boot from network which is connected to ethernet of Thunderbolt3 WS Dock when boot mode is Legacy mode. - Fixed an issue where system might hang at POST when Thunderbolt3 WS Dock is attached. - Fixed an issue where BIOS might generate 0288 beep error. I haven’t had time to update this 1.32 on my machine yet, though I think the update would be just as smooth as previous release on Fedora 32 system. ...