Firmware

So another new post, another new firmware update? You bet it is! Early this month, Lenovo just released another BIOS firmware for ThinkPad P1 Gen 1. It looks like Lenovo has fixed a few bugs comparing to the the previous firmware release in March. CHANGES IN THIS RELEASE Version 1.28 [Important updates] - Addresses CVE-2019-0154 (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2019-0154) Refer to Lenovo's Security Advisory page for additional information about LEN-27714 "Multi-vendor BIOS Security Vulnerabilities" (https://support.lenovo.com/us/en/product_security/LEN-27714) - Addresses CVE-2020-0548 (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0548) - Addresses CVE-2020-0549 (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0549) - Addresses CVE-2020-0543 (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0543) [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Fixed an issue where system might hang after Intel AMT Control is set to Disabled by ThinkPad Setup. Let’s update the firmware, shall we? ...

Lenovo has “quietely” released another firmware (1.46) for ThinkPad X1 Carbon Gen 6. Changes in this release: CHANGES IN THIS RELEASE Version 1.46 [Important updates] - Update includes a security fix. [New functions or enhancements] Nothing. [Problem fixes] Nothing. I am not able to find out what the “important security fix” is. However, I’m happy to report that the firmware update went well on X1 Carbon Gen 6 running Fedora 31. ...

If you’re still running ThinkPad P1 Gen 1 (Type 20MD, 20ME) like me, there is an exciting news, at least to me. Lenovo just released a new BIOS/UEFI firmware updated at version 1.27 on Mar 20, 2020. Changes in this releases: CHANGES IN THIS RELEASE Version 1.27 [Important updates] - Addresses CVE-2019-0185 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0185) Refer to Lenovo's Security Advisory page for additionalinformation about LEN-27714 "Multi-vendor BIOS Security Vulnerabilities". (https://support.lenovo.com/us/en/product_security/LEN-27714) - Security fix addresses LEN-29406 "ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability". Refer to Lenovo's Security Advisory page for additionalinformation. (https://support.lenovo.com/us/en/solutions/LEN-29406) - Addresses CVE-2019-14607 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14607) [New functions or enhancements] - Updated the CPU microcode. - Supported BIOS password authentication before entering into MEBx. [Problem fixes] - Nothing. On a Fedora (31/32) laptop, to update the firmware is very easy nowaday. Here are the 2 commands to run: ...

Though a new firmware was release for ThinkPad X1 Carbon G6 since last month, 2020/01/23, I only found about this today. Unlike the firmware for Dell’s laptop, once can easily update it with fwupmgr if your Linux system supports it. Here’s what’s changed in this release. CHANGES IN THIS RELEASE Version 1.45 <1.45> UEFI: 1.45 / ECP: 1.20 - (Fix) Fixed an issue where a system hardware controller device might disappear at 2nd boot. To update it on Fedora 31, run: ...

Dell released a new System BIOS firmware for Dell XPS 13 2-in-1 version 1.1.3 at the end of last year. This release marked as Urgent, and it fixed the following issues (as taken from Dell’s site): Fixed the incorrect panel size information in the BIOS setup menu. Fixed the issue where the MAC Address Override fails during the Preboot eXecution Environment (PXE) boot process. Change default setting of “Enable Thunderbolt (and PCIe behind TBT) pre-boot modules” to disabled by default If your laptop runs Windows 10 and has Dell Update utilities installed, this System BIOS firmware update process is very simple. You just need to run this utility and click on Update button. ...