Thinkpad

Lenovo released the firmeware v1.33 for ThinkPad P1 Gen1 recently which addressed many CVEs. CHANGES IN THIS RELEASE Version 1.33 [Important updates] - Update includes a security fix. - Addresses CVE-2020-0587, CVE-2020-0588, CVE-2020-0590, CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0587) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0588) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0590) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0591) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0592) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0593) [New functions or enhancements] - Updated the Diagnostics module to version 04.15.000. [Problem fixes] - Nothing It’s worth noting that this 1.33 version is not yet available via fwupdmgr. So to update it, just download the firmeware zip file from Lenovo website. Then, manually install it. There are 2 files in the zip, and I only need to install 1 of them. ...

Are you still rocking your X1 Carbon Gen 6 in 2020? Well, Lenovo just released a new BIOS firmware 1.50. Here are changes in this release: [Important updates] - Update includes a security fix. - Addresses CVE-2020-8696 and CVE-2020-8698. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8696) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8698) - Addresses CVE-2020-0587, CVE-2020-0588, CVE-2020-0590, CVE-2020-0591, CVE-2020-0592, and CVE-2020-0593. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0587) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0588) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0590) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0591) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0592) (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0593) [New functions or enhancements] - Updated the CPU microcode. - Updated the Diagnostics module to version 04.15.000. [Problem fixes] Nothing. It’s worth to note that this new firmware is available on Fedora (33) via fwupdmgr. ...

Lenovo just released a new BIOS firmware for its ThinkPad P1 Gen 1, v1.32. This version fixes a few issues, as well as update the CPU microcode. Here is the changes from Lenovo’s website. CHANGES IN THIS RELEASE Version 1.32 [Important updates] - Addresses CVE-2020-8696, CVE-2020-8698 - Addresses CVE-2020-8694, CVE-2020-8695 [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Fixed an issue where system might hang up at POST when some KVM device was connected. - Fixed an issue where the screen might not be displayed on Thinkpad LCD when opened lid just before startup Windows. - Fixed an issue where system might not boot from network which is connected to ethernet of Thunderbolt3 WS Dock when boot mode is Legacy mode. - Fixed an issue where system might hang at POST when Thunderbolt3 WS Dock is attached. - Fixed an issue where BIOS might generate 0288 beep error. I haven’t had time to update this 1.32 on my machine yet, though I think the update would be just as smooth as previous release on Fedora 32 system. ...

A quick note to remind ThinkPad X1 Carbon 6 users that Lenovo just released a new firmware for the Thunderbolt on this laptop. And, it’s available via fwupd if you run Fedora (possibly also available on Ubuntu). [root@benji ~]# fwupdmgr update • Thunderbolt Controller has the latest available firmware version Upgrade available for Embedded Controller from 0.1.20 to 0.1.21 20KHCTO1WW must remain plugged into a power source for the duration of the update to avoid damage. Continue with update? [Y|n]: Downloading… [***************************************] Decompressing… [***************************************] Authenticating… [***************************************] Updating Embedded Controller…************************************] Scheduling… [***************************************] Successfully installed firmware • Intel Management Engine has the latest available firmware version • SAMSUNG MZVLW256HEHP-000L7 has no available firmware updates • System Firmware has the latest available firmware version An update requires a reboot to complete. Restart now? [y|N]: All you need to do is rebooting the machine.

It seems like Lenovo releases a new BIOS firmeware every month for its ThinkPad, at least for the ThinkPad P1 Gen1. On July 21, the BIOS firmware version 1.31 was released. CHANGES IN THIS RELEASE Version 1.31 [Important updates] - Address CVE-2020-0548, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0548) - Address CVE-2020-0549, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0549) - Address CVE-2020-0543, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0543) [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Fixed an issue where Force PXE boot by Intel AMT did not work. This firmware supports both ThinkPad P1 Gen1 and ThinkPad X1 Extreme 1: ...