LVFS: LIFEBOOK

Fujitsu LIFEBOOK

Updating the ME firmware on your LIFEBOOK solves issues.

This release includes the following updates.Intel Management Engine Firmware will be updated by this module.

Urgency	high
Reported Success	94% (low confidence)
Fixed issues:	INTEL-SA-00783 CVE-2022-38102 Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access. CVE-2022-36392 Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthenticated user to potentially enable denial of service via network access.
Licenses	Proprietary, distributed by agreement
Security	No issues found using FwHunt from Binarly More info Update is cryptographically signed More info Added to the LVFS by Fujitsu More info Firmware can be verified after flashing More info Virus checked using ClamAV More info Firmware has no attestation checksums More info Firmware has no detected SBoM More info
Release Gating	Not available to ChromeOS users More info

This release includes the following updates:

Urgency	high
Reported Success	100% (low confidence)
Fixed issues:	INTEL-SA-00610 CVE-2022-29893 Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access. CVE-2022-27497 Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access. CVE-2022-26845 Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Licenses	Proprietary, distributed by agreement
Security	No issues found using FwHunt from Binarly More info Update is cryptographically signed More info Added to the LVFS by Fujitsu More info Firmware can be verified after flashing More info Virus checked using ClamAV More info Firmware has no attestation checksums More info Firmware has no detected SBoM More info
Release Gating	Not available to ChromeOS users More info

Linux Vendor Firmware Service Project a Series of LF Projects, LLC :: Charter