cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
ClayL
Not applicable
Posts: 5
Registered: ‎08-01-2015
Location: US
Views: 34,812
Message 1 of 40

BIOS updates for Meltdown and Spectre

BIOS updates for Meltdown and Spectre - any info on when they will be ready/released?

bluffwood
Not applicable
Posts: 1
Registered: ‎01-09-2018
Location: US
Views: 34,518
Message 2 of 40

Re: BIOS updates for Meltdown and Spectre

The Lenovo Support solutions article LEN-18282 lists some systems and the status of BIOS updates.  But there are many systems not listed.  I'm wondering about a BIOS update from my IdeaCentre K450 desktop.

 

https://support.lenovo.com/us/en/solutions/len-18282

hozalp
Not applicable
Posts: 1
Registered: ‎01-10-2018
Location: TR
Views: 34,416
Message 3 of 40

Re: BIOS updates for Meltdown and Spectre

I hope a LENOVO will soon release an update for Y510p soon... any news about the updates release dates?

robster2001
Not applicable
Posts: 2
Registered: ‎01-09-2018
Location: US
Views: 33,549
Message 4 of 40

Re: BIOS updates for Meltdown and Spectre

After some heavy-handed moderation on another Lenovo forum, I'm going to ask here.

 

When will I see a BIOS update for my G50-45 laptop (type 80E3016QUS)?  It doesn't appear on any published list.

Michael222
Not applicable
Posts: 11
Registered: ‎01-18-2014
Location: NL
Views: 32,759
Message 5 of 40

Re: BIOS updates for Meltdown and Spectre Q190 Desktop (ideacentre) Machine Type: 10115

The Lenovo Support solutions article LEN-18282 lists some systems and the status of BIOS updates.  But there are many systems not listed.  I'm wondering about a BIOS update from my: Lenovo IdeaCentre Q190 Desktop.

 

Lenovo Q190 Desktop (ideacentre)

Machine Type: 10115
LonginK
Not applicable
Posts: 2
Registered: ‎01-14-2018
Location: CZ
Views: 32,729
Message 6 of 40

Re: BIOS updates for Meltdown and Spectre

Is there a list of products out-of-support? I'm wondering if my W520 will get a BIOS update

goretsky
Not applicable
Posts: 3,340
Registered: ‎12-01-2007
Location: US
Views: 32,716
Message 7 of 40

Re: BIOS updates for Meltdown and Spectre

Hello,

 

The End of Life list can be found at https://download.lenovo.com/eol/index.html.

 

Regards,

 

Aryeh Goretsky

 

 


@LonginK wrote:

Is there a list of products out-of-support? I'm wondering if my W520 will get a BIOS update


 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP72 (20MB-*)P50 (20EN-*)S230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)Yoga 370

  Communities:   English    Deutsche    Español    Português    Русскоязычное    Česká    Slovenská    Українська   Język Polski    Moto English

green5178
Not applicable
Posts: 1,423
Registered: ‎07-21-2010
Location: US
Views: 32,127
Message 8 of 40

Re: BIOS updates for Meltdown and Spectre

Hi LonginK,

 

Your W520 is on the list of systems that will be patched.

 

https://support.lenovo.com/us/en/solutions/LEN-18282

 

patch.JPG

 


 If a post answers your question, please mark it as an”Accepted Solution“!
 If a post helps you, please click the star to give it a "Kudo"!


 I do not work for, nor do I speak for Lenovo. I will not respond to unsolicited private messages. Questions belong in the forum so it may   help other forum members as well.
 T490, TP 25 Retro, X1 Yoga 3rd Gen, W510 850 EVO, A30p
 Retired 385D, A20p, A21p

al42and
Not applicable
Posts: 1
Registered: ‎01-13-2018
Location: RU
Views: 31,443
Message 9 of 40

Re: BIOS updates for Meltdown and Spectre

Hi Aryeh,

 

What about systems that are listed neither in https://download.lenovo.com/eol/index.html nor in https://support.lenovo.com/us/en/solutions/len-18282?

 

E.g., Lenovo Yoga 2 Pro.

 

 

A bunch of rushed patches by, at least, Intel, Microsoft, and Ubuntu, have bricked the systems.

So I don't want to fearmonger and hurry anyone, but it would be nice to have a proper (even approximate) timeline of BIOS updates. Or at least know for sure that it is not coming at all.

 

 

Highlighted
goretsky
Not applicable
Posts: 3,340
Registered: ‎12-01-2007
Location: US
Views: 31,412
Message 10 of 40

Re: BIOS updates for Meltdown and Spectre

Hello,

 

The LEN-18282 advisory seems to be getting updated every couple of days right now, so the best suggestion I have at this point is to keep checking it for updates.

 

As best as I can tell, Intel seems to be rolling out the patches for the Meltdown and Spectre vulnerabilities starting with their newest CPUs first, and working their way backwards towards older models, according to this statement:

 


For Intel CPUs introduced in the past five years, we expect to issue updates for more than 90 percent of them within a week, and the remainder by the end of January. We will continue to issue updates for other products thereafter.


Sourcehttps://newsroom.intel.com/news/intel-offers-security-issue-update/

 

However, there also has to be time to formally verify that the patches work.  We've alread seen patches withdrawn by Dell, Lenovo and VMware (amongst others) because Intel subsequently found out they were buggy, and I think everyone's trying to avoid having to re-release a patch multiple times because of quality issues.

 

In the meantime, keep all your other software up to date (operating system, security software, web browser, drivers, etc.).  For example, Nvidia and AMD have both stated that their GPUs are not vulnerable to Spectre (Meltdown is Intel-specific), but Nvidia recently released some security updates for their device drivers under Windows because their software was vulnerable, etc.

 

My day job (I'm a volunteer here) is in the computer security field, and I've been carefully watching how this evolves.  To date, I have not seen any evidence of attack code exploiting these vulnerabilties in the wild, so from that perspective, we're more in the prescriptive advice and guidance phase, where the information compromise level from the vulnerability is high, but the risk of it happening, right now, is low.

 

Regards,

 

Aryeh Goretsky

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP72 (20MB-*)P50 (20EN-*)S230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)Yoga 370

  Communities:   English    Deutsche    Español    Português    Русскоязычное    Česká    Slovenská    Українська   Język Polski    Moto English

Check out current deals!


Shop current deals