cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
ClayL
Paper Tape
Posts: 4
Registered: ‎08-01-2015
Location: US
Views: 30,302
Message 1 of 40

BIOS updates for Meltdown and Spectre

BIOS updates for Meltdown and Spectre - any info on when they will be ready/released?

bluffwood
Paper Tape
Posts: 1
Registered: ‎01-09-2018
Location: US
Views: 30,057
Message 2 of 40

Re: BIOS updates for Meltdown and Spectre

The Lenovo Support solutions article LEN-18282 lists some systems and the status of BIOS updates.  But there are many systems not listed.  I'm wondering about a BIOS update from my IdeaCentre K450 desktop.

 

https://support.lenovo.com/us/en/solutions/len-18282

hozalp
What's DOS?
Posts: 1
Registered: ‎01-10-2018
Location: TR
Views: 29,955
Message 3 of 40

Re: BIOS updates for Meltdown and Spectre

I hope a LENOVO will soon release an update for Y510p soon... any news about the updates release dates?

robster2001
Blue Screen Again
Posts: 2
Registered: ‎01-09-2018
Location: US
Views: 29,088
Message 4 of 40

Re: BIOS updates for Meltdown and Spectre

After some heavy-handed moderation on another Lenovo forum, I'm going to ask here.

 

When will I see a BIOS update for my G50-45 laptop (type 80E3016QUS)?  It doesn't appear on any published list.

Michael222
Fanfold Paper
Posts: 11
Registered: ‎01-18-2014
Location: NL
Views: 28,298
Message 5 of 40

Re: BIOS updates for Meltdown and Spectre Q190 Desktop (ideacentre) Machine Type: 10115

The Lenovo Support solutions article LEN-18282 lists some systems and the status of BIOS updates.  But there are many systems not listed.  I'm wondering about a BIOS update from my: Lenovo IdeaCentre Q190 Desktop.

 

Lenovo Q190 Desktop (ideacentre)

Machine Type: 10115
LonginK
What's DOS?
Posts: 1
Registered: ‎01-14-2018
Location: CZ
Views: 28,268
Message 6 of 40

Re: BIOS updates for Meltdown and Spectre

Is there a list of products out-of-support? I'm wondering if my W520 will get a BIOS update

Community SeniorMod
Community SeniorMod
Posts: 3,143
Registered: ‎12-01-2007
Location: US
Views: 28,255
Message 7 of 40

Re: BIOS updates for Meltdown and Spectre

Hello,

 

The End of Life list can be found at https://download.lenovo.com/eol/index.html.

 

Regards,

 

Aryeh Goretsky

 

 


@LonginK wrote:

Is there a list of products out-of-support? I'm wondering if my W520 will get a BIOS update


 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP50 (20EN-*)S230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)Yoga 370

de.gif Deutsche Community es.gif Comunidad en Español ru.gif Русскоязычное Сообщество pt.gif Communidade Portugues
Guru
Posts: 786
Registered: ‎07-21-2010
Location: US
Views: 27,666
Message 8 of 40

Re: BIOS updates for Meltdown and Spectre

Hi LonginK,

 

Your W520 is on the list of systems that will be patched.

 

https://support.lenovo.com/us/en/solutions/LEN-18282

 

patch.JPG


If a post answers your question, please mark it as an”Accepted Solution“!
If a post helps you, please click the star to give it a "Kudo"!


I do not work for, nor do I speak for Lenovo. I will not respond to private unsolicited private messages. Questions belong in the forum so it may help other forum members as well.
TP 25 Retro, X1 Yoga 3rd Gen, W510 850 EVO, A30p
Retired 385D, A20p, A21p

Highlighted
al42and
Paper Tape
Posts: 1
Registered: ‎01-13-2018
Location: RU
Views: 26,982
Message 9 of 40

Re: BIOS updates for Meltdown and Spectre

Hi Aryeh,

 

What about systems that are listed neither in https://download.lenovo.com/eol/index.html nor in https://support.lenovo.com/us/en/solutions/len-18282?

 

E.g., Lenovo Yoga 2 Pro.

 

 

A bunch of rushed patches by, at least, Intel, Microsoft, and Ubuntu, have bricked the systems.

So I don't want to fearmonger and hurry anyone, but it would be nice to have a proper (even approximate) timeline of BIOS updates. Or at least know for sure that it is not coming at all.

 

 

Community SeniorMod
Community SeniorMod
Posts: 3,143
Registered: ‎12-01-2007
Location: US
Views: 26,951
Message 10 of 40

Re: BIOS updates for Meltdown and Spectre

Hello,

 

The LEN-18282 advisory seems to be getting updated every couple of days right now, so the best suggestion I have at this point is to keep checking it for updates.

 

As best as I can tell, Intel seems to be rolling out the patches for the Meltdown and Spectre vulnerabilities starting with their newest CPUs first, and working their way backwards towards older models, according to this statement:

 


For Intel CPUs introduced in the past five years, we expect to issue updates for more than 90 percent of them within a week, and the remainder by the end of January. We will continue to issue updates for other products thereafter.


Sourcehttps://newsroom.intel.com/news/intel-offers-security-issue-update/

 

However, there also has to be time to formally verify that the patches work.  We've alread seen patches withdrawn by Dell, Lenovo and VMware (amongst others) because Intel subsequently found out they were buggy, and I think everyone's trying to avoid having to re-release a patch multiple times because of quality issues.

 

In the meantime, keep all your other software up to date (operating system, security software, web browser, drivers, etc.).  For example, Nvidia and AMD have both stated that their GPUs are not vulnerable to Spectre (Meltdown is Intel-specific), but Nvidia recently released some security updates for their device drivers under Windows because their software was vulnerable, etc.

 

My day job (I'm a volunteer here) is in the computer security field, and I've been carefully watching how this evolves.  To date, I have not seen any evidence of attack code exploiting these vulnerabilties in the wild, so from that perspective, we're more in the prescriptive advice and guidance phase, where the information compromise level from the vulnerability is high, but the risk of it happening, right now, is low.

 

Regards,

 

Aryeh Goretsky

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP50 (20EN-*)S230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)Yoga 370

de.gif Deutsche Community es.gif Comunidad en Español ru.gif Русскоязычное Сообщество pt.gif Communidade Portugues
Top Kudoed Authors