Fwupdmgr

A quick note to remind ThinkPad X1 Carbon 6 users that Lenovo just released a new firmware for the Thunderbolt on this laptop. And, it’s available via fwupd if you run Fedora (possibly also available on Ubuntu). [root@benji ~]# fwupdmgr update • Thunderbolt Controller has the latest available firmware version Upgrade available for Embedded Controller from 0.1.20 to 0.1.21 20KHCTO1WW must remain plugged into a power source for the duration of the update to avoid damage. Continue with update? [Y|n]: Downloading… [***************************************] Decompressing… [***************************************] Authenticating… [***************************************] Updating Embedded Controller…************************************] Scheduling… [***************************************] Successfully installed firmware • Intel Management Engine has the latest available firmware version • SAMSUNG MZVLW256HEHP-000L7 has no available firmware updates • System Firmware has the latest available firmware version An update requires a reboot to complete. Restart now? [y|N]: All you need to do is rebooting the machine.

It seems like Lenovo releases a new BIOS firmeware every month for its ThinkPad, at least for the ThinkPad P1 Gen1. On July 21, the BIOS firmware version 1.31 was released. CHANGES IN THIS RELEASE Version 1.31 [Important updates] - Address CVE-2020-0548, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0548) - Address CVE-2020-0549, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0549) - Address CVE-2020-0543, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0543) [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Fixed an issue where Force PXE boot by Intel AMT did not work. This firmware supports both ThinkPad P1 Gen1 and ThinkPad X1 Extreme 1: ...

Update BIOS firmware version 1.9.1 is available for Dell Latitude 7400. This firmware was released on 30 June 2020. It is marked Urgent and contains the following fixes and enhancements: Fixes: Fixed the issue where the system cannot detect the Intel Software Guard Extensions (SGX) device when SGX is enabled. Firmware updates to address security advisory INTEL-SA-00295 (CVE-2020-0531, CVE-2020-0532, CVE-2020-0533, CVE-2020-0535, CVE-2020-0536, CVE-2020-0537, CVE-2020-0538, CVE-2020-0539, CVE-2020-0540, CVE-2020-0545, CVE-2020-0594, CVE-2020-0595, CVE-2020-0596, and CVE-2020-8674). Firmware updates to address the Intel Security Advisory INTEL-SA-00320 (CVE-2020-0543). Firmware updates to address the Intel Security Advisory INTEL-SA-00329 (CVE-2020-0548 and CVE-2020-0549). Firmware updates to address the Intel Security Advisory INTEL-SA-00322 (CVE-2020-0528 and CVE-2020-0529). Enhancements: ...

Dell released a new BIOS firmware version 1.7.4 for the Latitude 7300 and 7400 on May 22, 2020. This release is again marked Urgent and contains the following fixes and enhancements: Fixes: Firmware updated to address CVE-2020-5363 Enhancements: Updated the Embedded Controller Engine Firmware This version 1.7.4 is already available on Fedora 32 via fwupdmgr tool. [root@matht436 ~]# fwupdmgr refresh Fetching signature https://cdn.fwupd.org/downloads/firmware.xml.gz.jcat Downloading… [***************************************] Fetching metadata https://cdn.fwupd.org/downloads/firmware-00558-stable.xml.gz Downloading… [***************************************] Successfully downloaded new metadata: 1 local device supported [root@matht436 ~]# fwupdmgr update • Thunderbolt Controller has no available firmware updates • SSDPEKKF512G8 NVMe INTEL 512GB has no available firmware updates Upgrade available for System Firmware from 1.7.3 to 1.7.4 Latitude 7400 must remain plugged into a power source for the duration of the update to avoid damage. Continue with update? [Y|n]: Downloading 1.7.4 for System Firmware... Fetching firmware https://fwupd.org/downloads/a397a5b5fb47d0411ce59e5a4550940681c741ebf8b601f9c90934e4a7ce4e29-Latitude_7X00_1.7.4.cab Downloading… [***************************************] Less than one minute remaining… Decompressing… [***************************************] Authenticating… [***************************************] Updating System Firmware…[ / ] Scheduling… [***************************************] Successfully installed firmware • Touchpad has no available firmware updates • Unifying Receiver has no available firmware updates An update requires a reboot to complete. Restart now? [y|N]: There was no problem after rebooting. ...

Lenovo just released an updated BIOS firmware version 1.30 for ThinkPad P1 Gen1 on June 3rd. The changes in this v1.30 release are: CHANGES IN THIS RELEASE Version 1.30 [Important updates] - Update includes a security fix. - Address CVE-2020-0529, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0529) - Address CVE-2020-0528, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0528) [New functions or enhancements] - Updated the Diagnostics module to version 04.12.001. [Problem fixes] - Fixed an issue where USB keyboard connected via Thunderbolt WS Dock might not be used at BIOS POST. This firmware supports both ThinkPad P1 Gen1 and ThinkPad X1 Extreme 1: ...