cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Community SeniorMod
Community SeniorMod
Posts: 1,963
Registered: ‎05-01-2010
Location: US
Views: 24,338
Message 1 of 53

Microsoft issues emergency Windows update for processor security bugs

Microsoft is issuing a rare out-of-band security update to supported versions of Windows today. The software update is part of a number of fixes that will protect against a newly-discovered processor bug in Intel, AMD, and ARM chipsets. Sources familiar with Microsoft’s plans tell The Verge that the company will issue a Windows update that will be automatically applied to Windows 10 machines at 5PM ET / 2PM PT today.

The update will also be available for older and supported versions of Windows today, but systems running operating systems like Windows 7 or Windows 8 won’t automatically be updated through Windows Update until next Tuesday. Windows 10 will be automatically updated today.

 

https://www.theverge.com/2018/1/3/16846784/microsoft-processor-bug-windows-10-fix












Deutsche Community Comunidad en Español English Community Русскоязычное Сообщество Communidade Portugues

If you find a post helpful and it answers your question, please click the "Accept As Solution" button.

I am not employed by Lenovo or Microsoft. I am a volunteer.

SpywareHammer





Finn350
Punch Card
Posts: 7
Registered: ‎01-03-2018
Location: FI
Views: 24,139
Message 2 of 53

Re: Microsoft issues emergency Windows update for processor security bugs

The KB article regarding the update (for Windows 10 Version 1709 and Windows Server 2016 Version 1709) is here:

https://support.microsoft.com/en-us/help/4056892/windows-10-update-kb4056892

 

Apparently the update delivery is staged, as "Check for updates" only recently offered the update to one of my computers, and for the other the update is not yet offered (despite having no 3rd party AV software).

 

ssawatzky
What's DOS?
Posts: 1
Registered: ‎01-04-2018
Location: CA
Views: 24,094
Message 3 of 53

Re: Microsoft issues emergency Windows update for processor security bugs

From Microsoft: "To get all available protections, hardware/firmware and software updates are required. This includes microcode from device OEMs"


Yay.

Greeley
Paper Tape
Posts: 1
Registered: ‎01-04-2018
Location: US
Views: 24,049
Message 4 of 53

Re: Microsoft issues emergency Windows update for processor security bugs

Assuming this means new BIOS updates for everyone, again....yay.
Finn350
Punch Card
Posts: 7
Registered: ‎01-03-2018
Location: FI
Views: 24,014
Message 5 of 53

Re: Microsoft issues emergency Windows update for processor security bugs

Microsoft ADV180002 | Guidance to mitigate speculative execution side-channel vulnerabilities

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002

 

 

swhitcher
Serial Port
Posts: 63
Registered: ‎02-15-2010
Location: US
Views: 23,982
Message 6 of 53

Re: Microsoft issues emergency Windows update for processor security bugs

Hopefully Lenovo will put out a statement on this soon to advise what systems will get patches and what the timeline will be for availability.  

Finn350
Punch Card
Posts: 7
Registered: ‎01-03-2018
Location: FI
Views: 23,919
Message 7 of 53

Re: Microsoft issues emergency Windows update for processor security bugs

Lenovo Security Advisory: LEN-18282

https://support.lenovo.com/fi/en/solutions/len-18282

Highlighted
esnj
What's DOS?
Posts: 1
Registered: ‎01-04-2018
Location: US
Views: 24,628
Message 8 of 53

Re: Microsoft issues emergency Windows update for processor security bugs

Is there a patch available yet?

Meltdown and Spectre

Bugs in modern computers leak passwords and sensitive data.

 

Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware bugs allow programs to steal data which is currently processed on the computer. While programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Spectre to get hold of secrets stored in the memory of other running programs. This might include your passwords stored in a password manager or browser, your personal photos, emails, instant messages and even business-critical documents.

Meltdown and Spectre work on personal computers, mobile devices, and in the cloud. Depending on the cloud provider's infrastructure, it might be possible to steal data from other customers.

 

Admin note; subject edited

Community SeniorMod
Community SeniorMod
Posts: 1,963
Registered: ‎05-01-2010
Location: US
Views: 23,760
Message 9 of 53

Re: Microsoft issues emergency Windows update for processor security bugs

https://support.microsoft.com/en-us/help/4072699/important-information-regarding-the-windows-securit...

 

Note:
If you have MalwareBytes3 based software installed and registered with Windows Action Center, you were not be able to receive any MS updates automatically; the patch could not be automatially applied. That has now been corrected: Go to Settings > About tab and verify that you have Update Package version 1.0.3624 .
If that is done all users should now able to receive the Microsoft Patch to mitigate Meltdown.












Deutsche Community Comunidad en Español English Community Русскоязычное Сообщество Communidade Portugues

If you find a post helpful and it answers your question, please click the "Accept As Solution" button.

I am not employed by Lenovo or Microsoft. I am a volunteer.

SpywareHammer





Community SeniorMod
Community SeniorMod
Posts: 1,963
Registered: ‎05-01-2010
Location: US
Views: 23,754
Message 10 of 53

Re: Microsoft issues emergency Windows update for processor security bugs

Intel claims its new security updates make PCs ‘immune’ to Meltdown and Spectre CPU bugs
90 percent of PCs will be covered by end of next week

https://www.theverge.com/2018/1/4/16850776/intel-meltdown-spectre-security-patch-immune-response












Deutsche Community Comunidad en Español English Community Русскоязычное Сообщество Communidade Portugues

If you find a post helpful and it answers your question, please click the "Accept As Solution" button.

I am not employed by Lenovo or Microsoft. I am a volunteer.

SpywareHammer





Check out current deals!


Shop current deals