The fwupd tool has become a staple in the Linux ecosystem, providing a secure and easy way to keep device firmware up to date. In its latest version, fwupd 2.0.11 , this open-source utility takes a step forward with new features, expanded compatibility, and significant bug fixes to improve user experience and interoperability with various devices.
Released just two weeks after the previous version , fwupd 2.0.11 is notable primarily for adding support for the Lenovo Thunderbolt 5 Smart Dock , enabling new Lenovo hubs and workstations to function correctly with Thunderbolt-equipped Linux systems. This addition reflects the project's ongoing strategy to expand the number of recognized devices and simplify firmware management, particularly in enterprise and professional environments where these docks are especially important.
New features and technical improvements in Fwupd 2.0.11
Among the main features of fwupd 2.0.11 is the addition of a `check-reboot-needed` command , designed for integration into scripts, which identifies whether a reboot is necessary after a firmware update. Furthermore, this update incorporates the ability to read the SELinux status within the metadata of crash reports, facilitating more accurate diagnostics in environments with enhanced security policies.
The version also adds support for the property management command on Dell docks and extends handling of the VIDPID subsystem if the information is provided via ModemManager. Options to change the RTS54HUB block size using a quirk entry have been introduced, and the ability to Perform Legion HID2 downgrades without having to use the forced option --force. Additionally, it is now possible to automatically clean up settings when performing an update.
Optimizations and bug fixes
Significant improvements have been implemented in update management, such as specifying multiple device IDs in command get-updates, or the addition of caches for analyzing processed cabinet packets, thus correcting problems with report uploads. Additionally, there is a backup mechanism for the activation date in case X.509 certificates don't include a suitable subject.
For security and compatibility reasons, fwupd no longer allows DBX updates on the AiStone X5KK4NAG and discontinues the use of translated low-level error messages in crash reports. Some checks when analyzing PK, KEK, and db certificates have been softened, and the systemd.machine_id identifier is no longer included in these reports.
Other technical improvements include an increased timeout for Logitech RDFU devices , improved VendorID identification via ModemManager, and the use of UEFI PK reporting attributes in UEFI plugins. Additionally, support for recent Synaptics VMM9 devices has been improved, adding a delay after disabling RC for greater reliability.
More information and download
For detailed information on all the new features and changes, it is recommended to consult the release notes available on the fwupd project's GitHub page, where the source package can also be downloaded. The project recommends installing or updating fwupd using the official and stable repositories of each GNU/Linux distribution to ensure maximum compatibility and support.
With this update, fwupd reinforces its commitment to providing modern and efficient firmware management on Linux systems, facilitating both support for new devices and secure updates in end-user and enterprise environments.
