p1

Lenovo released the firmeware v1.33 for ThinkPad P1 Gen1 recently which addressed many CVEs. CHANGES IN THIS RELEASE Version 1.33 [Important updates] - Update includes a security fix. - Addresses CVE-2020-0587, CVE-2020-0588, CVE-2020-0590, CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0587) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0588) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0590) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0591) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0592) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0593) [New functions or enhancements] - Updated the Diagnostics module to version 04.15.000. [Problem fixes] - Nothing It’s worth noting that this 1.33 version is not yet available via fwupdmgr....

Lenovo just released a new BIOS firmware for its ThinkPad P1 Gen 1, v1.32. This version fixes a few issues, as well as update the CPU microcode. Here is the changes from Lenovo’s website. CHANGES IN THIS RELEASE Version 1.32 [Important updates] - Addresses CVE-2020-8696, CVE-2020-8698 - Addresses CVE-2020-8694, CVE-2020-8695 [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Fixed an issue where system might hang up at POST when some KVM device was connected....

It seems like Lenovo releases a new BIOS firmeware every month for its ThinkPad, at least for the ThinkPad P1 Gen1. On July 21, the BIOS firmware version 1.31 was released. CHANGES IN THIS RELEASE Version 1.31 [Important updates] - Address CVE-2020-0548, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0548) - Address CVE-2020-0549, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0549) - Address CVE-2020-0543, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0543) [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Fixed an issue where Force PXE boot by Intel AMT did not work....

Lenovo just released an updated BIOS firmware version 1.30 for ThinkPad P1 Gen1 on June 3rd. The changes in this v1.30 release are: CHANGES IN THIS RELEASE Version 1.30 [Important updates] - Update includes a security fix. - Address CVE-2020-0529, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0529) - Address CVE-2020-0528, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0528) [New functions or enhancements] - Updated the Diagnostics module to version 04.12.001. [Problem fixes] - Fixed an issue where USB keyboard connected via Thunderbolt WS Dock might not be used at BIOS POST....

It’s almost exactly one month from the last time Lenovo released (v1.28 of ) the BIOS firmware for ThinkPad P1 Gen 1. Apparently, v1.28 firmware has been marked “Withdrawn” according to this n2eul21w.txt. The changes in this release v1.29 is: CHANGES IN THIS RELEASE Version 1.29 [Important updates] - Addresses CVE-2019-0154 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0154) Refer to Lenovo's Security Advisory page for additional information about LEN-27714 "Multi-vendor BIOS Security Vulnerabilities". (https://support.lenovo.com/us/en/product_security/LEN-27714) [New functions or enhancements] - Updated the CPU microcode....

So another new post, another new firmware update? You bet it is! Early this month, Lenovo just released another BIOS firmware for ThinkPad P1 Gen 1. It looks like Lenovo has fixed a few bugs comparing to the the previous firmware release in March. CHANGES IN THIS RELEASE Version 1.28 [Important updates] - Addresses CVE-2019-0154 (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2019-0154) Refer to Lenovo's Security Advisory page for additional information about LEN-27714 "Multi-vendor BIOS Security Vulnerabilities" (https://support....

If you’re still running ThinkPad P1 Gen 1 (Type 20MD, 20ME) like me, there is an exciting news, at least to me. Lenovo just released a new BIOS/UEFI firmware updated at version 1.27 on Mar 20, 2020. Changes in this releases: CHANGES IN THIS RELEASE Version 1.27 [Important updates] - Addresses CVE-2019-0185 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0185) Refer to Lenovo's Security Advisory page for additionalinformation about LEN-27714 "Multi-vendor BIOS Security Vulnerabilities". (https://support.lenovo.com/us/en/product_security/LEN-27714) - Security fix addresses LEN-29406 "ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability"....

It looks like Lenovo just released a new firmware for ThinkPad P1 Gen1 again. Here is the changes in this 1.25 release: CHANGES IN THIS RELEASE Version 1.25 [Important updates] - Update includes security fixes. - Addresses CVE-2019-0151 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0151) - Addresses CVE-2019-0152 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0152) - Addresses CVE-2019-0123 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0123) - Addresses CVE-2019-0124 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0124) - Addresses CVE-2019-0117 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0117) - Addresses CVE-2019-0184 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0184) [New functions or enhancements] - Updated the CPU microcode. - Updated Regulatory Information....

I’ve been relying on Gnome Software Center to let me know when new ThinkPad P1 firmware is available. Up until today, there is no new firmware available since the last update back in August 2019. However, I stumbled on a post on reddit r/thinkpad, someone mentioned the BIOS 1.26 had been released for X1 Extreme/P1 Gen 2. This made me wonder if there was also new version of BIOS for the P1 Gen 1 that I have....

It looks like there are more device firmware available for Lenovo ThinkPad P1 (and X1 Extreme). Based on the list from Gnome Software Center, the available firmware are: Thunderbolt Firmware N2ETF12W System Firmware (Embedded Controller) 0.1.11 System Firmware (?) 0.1.23 It’s time to update all of them on my P1.