Fwupd 2.1.7 was released as the latest maintenance update to the Linux firmware update daemon, with the most notable addition being a new systemd-pcrlock plugin connected to the UEFI firmware update process.
Alongside this, fwupd 2.1.7 adds new host security attributes for reporting whether Memory Technology Device storage is locked and whether TCG-compatible disk encryption is active. The release also introduces support for EFI signature lists marked as externally managed.
Another change adds well-known AppStream identifiers for commonly used BIOS settings. This should make it easier for desktop applications and management tools to identify and present equivalent firmware configuration options consistently across hardware from different manufacturers.
For Android builds, fwupd now enables additional plugins. The release also includes many bug fixes, including a correction for firmware updates on the Lenovo TBT5 Smart Dock 7500, along with a fix for dropped status notifications while an update is in progress.
On top of that, the update resolves PolicyKit authorization errors affecting fwupd-refresh.service and fixes a segmentation fault that could occur while parsing certain Logitech HID++ bootloader records. Another issue causing update failures when a touchpad controller was available only in bootloader mode has also been addressed.
Security and input-validation improvements include preventing forced installations over D-Bus, rejecting invalid CCGX device modes before accessing firmware version data, safely reading Synaptics RMI device responses, and validating GUID-defined section offsets against EFI section sizes.
Additional fixes improve Dell dock detection, ModemManager firmware preparation following a Firehose detach operation, Coreboot Verified Boot security reporting, temporary filesystem build tests, and memory use by moving more per-class limits into individual class instances.
On the hardware side, fwupd 2.1.7 adds support for the PixArt PJP360 device. For more details, check out the release notes.
