Welcome to our peer-to-peer forums, where owners help owners. Need help now? Visit eSupport here.

English Community

Lenovo NotebooksLenovo Yoga Series Notebooks
All Forum Topics
Options

217 Posts

06-04-2015

Brazil

1132 Signins

6609 Page Views

  • Posts: 217
  • Registered: ‎06-04-2015
  • Location: Brazil
  • Views: 6609
  • Message 1 of 10

Yoga 2 Pro new Firmware to address Spectre and Meltdown security risks

2018-01-07, 5:47 AM

Microsoft released a rare out-of-band security update to supported many versions of Windows. The software update is part of a number of fixes that will protect against a newly-discovered processor bug in Intel, AMD, and ARM chipsets. ADV180002 | Guidance to mitigate speculative execution side-channel vulnerabilities

Dubbed “Meltdown” and “Spectre,” the flaws affect nearly every device made in the past 20 years, and could allow attackers to use JavaScript code running in a browser to access memory in the attacker’s process. That memory content could contain key strokes, passwords, and other valuable information. More Info

For consumers, to keep Windows up to date is the first step but is mandatory to install applicable Firmware (BIOS) update provided by OEM device manufacturer.

 

1) Microsoft has released the following patches for Windows 10:
KB4056892 (OS Build 16299.192)
KB4056891 (OS Build 15063.850)
KB4056890 (OS Build 14393.2007)
KB4056888 (OS Build 10586.1356)
KB4056893 (OS Build 10240.17738)
(*) Verifying that protections are enabled, you are protected if all lines have the "True" value.

 

2) Then I would like to know when Lenovo Yoga 2 Pro (20266 / 80AY) is going to receive a microcode fix (Firmware Update) to address Spectre and Meltdown security risks?

Currently it isn't even listed under Lenovo Security Advisory LEN-18282

Please support your costumers with a proper Firmware.

 

Best Regards,

Reply
Options

8 Posts

06-29-2014

Russian Federation

22 Signins

171 Page Views

  • Posts: 8
  • Registered: ‎06-29-2014
  • Location: Russian Federation
  • Views: 171
  • Message 2 of 10

Yoga 2 Pro BIOS update (Meltdown/Spectre mitigation)?

2018-01-08, 12:20 PM
As I know, Intel already published microcode updates for all Haswell CPU's, including mobile. At least, ASUS support confirmed, that BIOS of all MB for Haswell will be updated. Updated microcodes for Linux are already available. What about BIOS update for the Yoga 2 Pro with i7-4500U? Thank you in advance.
Reply
Options

12 Posts

02-18-2014

Canada

61 Signins

393 Page Views

  • Posts: 12
  • Registered: ‎02-18-2014
  • Location: Canada
  • Views: 393
  • Message 3 of 10

Re: Yoga 2 Pro new Firmware to address Spectre and Meltdown security risks

2018-01-08, 21:39 PM
bump.
Reply
Options

3 Posts

01-09-2018

Singapore

3 Signins

34 Page Views

  • Posts: 3
  • Registered: ‎01-09-2018
  • Location: Singapore
  • Views: 34
  • Message 4 of 10

Re: Yoga 2 Pro new Firmware to address Spectre and Meltdown security risks

2018-01-09, 3:44 AM

Same here. Please issue an update asap.

Reply
Options

2 Posts

08-06-2012

United States

2 Signins

29 Page Views

  • Posts: 2
  • Registered: ‎08-06-2012
  • Location: United States
  • Views: 29
  • Message 5 of 10

Re: Yoga 2 Pro new Firmware to address Spectre and Meltdown security risks

2018-01-10, 17:09 PM

I'm also here looking for the status of a firmware update for the Yoga 2 for this mitigation. These computers aren't that old.  Manufacturers really give no reasons to update these days (computers aren't getting much faster anymore) so I suspect a lot of Haswell and Broadwell machines are still floating around and need to be patched. My other machine is also Haswell based and I'm currently pushing that manufacturer as well. Intel has released a microcode update for these processors (see below).  Manufacturers that patch these sorts of issues on still commonly used machines will get my future dollars.  Those who only update last years' devices will not.

 

https://downloadcenter.intel.com/download/27431/Linux-Processor-Microcode-Data-File?product=873

Reply
Options

35 Posts

03-16-2014

United States of America

66 Signins

552 Page Views

  • Posts: 35
  • Registered: ‎03-16-2014
  • Location: United States of America
  • Views: 552
  • Message 6 of 10

Re: Yoga 2 Pro BIOS update (Meltdown/Spectre mitigation)?

2018-01-11, 7:49 AM

Are there any Lenovo reps listening? If there are I would like to suggest that a link be provided showing when each model of Lenovo computer is expected to receive the necessary patch to fix the Meltdown/Spectre vulnerability.

 

My Yoga 2 Pro is only 4 years old and works perfectly fine. Seems reasonable that Lenovo should provide the necessary BIOS update. I know that is likely to be a large task considering how many different computers model have been sold by Lenovo. It would certainly reduce the anxiety level if customers knew about how long we will have to wait for a BIOS update, or if we are never going to receive a BIOS update.

Reply
Options

217 Posts

06-04-2015

Brazil

1132 Signins

6609 Page Views

  • Posts: 217
  • Registered: ‎06-04-2015
  • Location: Brazil
  • Views: 6609
  • Message 7 of 10

Re: Yoga 2 Pro BIOS update (Meltdown/Spectre mitigation)?

2018-01-11, 12:19 PM

Currently Yoga 2 Pro (20266) isn't even listed under Lenovo Security Advisory (NO ETA FOR US) as detailed HERE.
Please Lenovo support your costumers with a proper Firmware.
Regards,

Reply
Options

59 Posts

09-04-2016

United States of America

206 Signins

1744 Page Views

  • Posts: 59
  • Registered: ‎09-04-2016
  • Location: United States of America
  • Views: 1744
  • Message 8 of 10

Re: Yoga 2 Pro new Firmware to address Spectre and Meltdown security risks

2018-01-12, 2:37 AM

I have both a Yoga 2 Pro and a Yoga 910-13IKB 80VF and am checking daily for bios updates for both.

Reply
Options

10410 Posts

09-04-2014

Slovakia

32827 Signins

1219780 Page Views

  • Posts: 10410
  • Registered: ‎09-04-2014
  • Location: Slovakia
  • Views: 1219780
  • Message 9 of 10

Re: Yoga 2 Pro BIOS update (Meltdown/Spectre mitigation)?

2018-01-08, 16:39 PM
 

Andy

 

English Community Administrator
Lenovo eServices

Please remember to come back and mark the post that you feel solved your question as the solution, it earns the member + points 
Did you find a post helpfull? You can thank the member by awarding them a Thumbs Up
 

Please don't ask me questions by Personal Message; questions belong in the forums.


Using Browser Search to find your answers in Lenovo and Moto Community
Reply
Options

10410 Posts

09-04-2014

Slovakia

32827 Signins

1219780 Page Views

  • Posts: 10410
  • Registered: ‎09-04-2014
  • Location: Slovakia
  • Views: 1219780
  • Message 10 of 10

Re: Yoga 2 Pro new Firmware to address Spectre and Meltdown security risks

2018-01-16, 12:19 PM

All FYI

 

Two threads have been merged which explains the difference in subject titles on posts.  I have also removed some posts which were contrary to the Community Guidelines in regard to campaigning, further similar posts anywhere in the Community will also be removed.

 

As this topic is being addressed in the Security forum: https://forums.lenovo.com/t5/Security-Malware/bd-p/Security_Malware please search and engage discussion there.

 

This thread is now locked to avoid duplication, which only splinters discussions.

 

Andy

 

English Community Administrator
Lenovo eServices

Please remember to come back and mark the post that you feel solved your question as the solution, it earns the member + points 
Did you find a post helpfull? You can thank the member by awarding them a Thumbs Up
 

Please don't ask me questions by Personal Message; questions belong in the forums.


Using Browser Search to find your answers in Lenovo and Moto Community
Reply
Forum Home

Community Guidelines

Please review our Guidelines before posting.

Learn More

Check out current deals!

Go Shop
X

Save

X

Delete

X

No, I don’t want to share ideas Yes, I agree to these terms