What is the status for getting a BIOS update for the Yoga 2 Pro (Type 80AY) that will address the Spectre and Meltdown security vulnerabilities. I know that Intel pulled the micro code updates, so I expect it may take awhile. Please provide a status report that indictes when/if the Yoga 2 Pro will be updated.  Thank you.

I read somewhere that Intel is trying to get some of the updates re-released this weekend, but nobody will know until the updates appear.

[Moderator Note:  Posting edited to conform to the Community Guidelines.]

Dear richk,
 
While Intel has now issued Firmware updates for CPUs introduced in the past 5 years, Lenovo Yoga 2 Pro (20266 / 80AY) - Intel Core i7 4500U Haswell with "only" 3 years old isn't even listed under Lenovo End-Of-Life List or Lenovo Security Advisory LEN-18282 (NO ETA FOR US) as detailed HERE.
Please Lenovo keep us safe supporting your costumers with a proper Firmware update to address Spectre ASAP.
Could you please push Lenovo Engineering Team to show some commitment and provide this clarification statement?

Regards,

I am just a user like you.  I have no way to press Intel to do anything.

Hello,

This is primarily a user-to-user support forum staffed with volunteers like richk and myself.

If you would like the latest information from Lenovo on the status of patches to fix the vulnerability, visit Lenovo's advisory page at:

https://support.lenovo.com/uu/en/solutions/len-18282

That is the one place where all the information is being, tracked, shared and updated as new information becomes available.  It is updated every 1-2 business days, and sometimes twice a day.

If you would like to speak with Lenovo support to open a ticket, you can call them toll-free at +1 (800) 426-7378 in the United States or +1 (800) 565-3344 in Canada.  If you need a phone number for another country and are unable to locate it, please let me know and I'll try to locate it for you.

Lenovo cannot do anything until Intel has fixed the problem which caused the updates to be withdrawn, tested the fix and verified the fix.  Even then, Lenovo will have to contact their own tests to try and avoid a repeat of releasing and then withdrawing the updates.

Regards,

Aryeh Goretsky

---

wrote:

Hello,

 

This is primarily a user-to-user support forum staffed with volunteers like richk and myself.

 

If you would like the latest information from Lenovo on the status of patches to fix the vulnerability, visit Lenovo's advisory page at:

 

https://support.lenovo.com/uu/en/solutions/len-18282

 

That is the one place where all the information is being, tracked, shared and updated as new information becomes available.  It is updated every 1-2 business days, and sometimes twice a day.

 

If you would like to speak with Lenovo support to open a ticket, you can call them toll-free at +1 (800) 426-7378 in the United States or +1 (800) 565-3344 in Canada.  If you need a phone number for another country and are unable to locate it, please let me know and I'll try to locate it for you.

 

Lenovo cannot do anything until Intel has fixed the problem which caused the updates to be withdrawn, tested the fix and verified the fix.  Even then, Lenovo will have to contact their own tests to try and avoid a repeat of releasing and then withdrawing the updates.

 

Regards,

 

Aryeh Goretsky

 

---

Your reply, while appreciated, misses the point.

By now owners of the Yoga 2 Pro are well aware of the list at the link you provided. The source of our frustration is that the Yoga 2 Pro is not listed anywhere on that list. Therefore, we have no information whatsoever that indicates if the Yoga 2 Pro will receive an update that addresses both the Spectre and Meltdown vulnerabilities, or not.

At the very least Lenovo should be communicating whether or not the Yoga 2 Pro will be receiving an update. We fully understand that this will require Intel to release such a patch for our CPU's before the BIOS update can be provided. We just want assurance that we will be getting a patch in the forseeable future.

Hello,

I have numerous Lenovo computers besides the ones listed in my signature for which there has not yet been any announcement of patch status.  This is not unique to Lenovo; I have systems from other vendors like ASRock, Asus, Dell and HP for which I'm waiting on any kind of notification. 

System vendors have to verify that all they patches they receive from AMD, ARM and Intel work correctly on all the models they have sold.  For some systems, there may be additional work that needs to be done to verify compatibility, address performance or stability issues and so forth.

Until that kind of work is complete, it is going to be very difficult to announce if and when a particular system is going to receive a patch.

Regards,

Aryeh Goretsky

[Moderator Comment:  A post has been removed for failing to conform to the Community Guidelines.]

Dear Lenovo,

Intel releases new Spectre patches for PCs

Yoga 2 Pro (20266) owners still waiting Lenovo show some commitment with their customers to address this vulnerability listing our model into Lenovo Security Advisory LEN-18282 for future Firmware Update.

Regards,

Mod's Comment: Please do not start multiple posts on same issue as this only splinters the discussion. Instead, keep your current discussion updated with any additional information. Your duplicate has been removed. Thanks !

Intel - Microcode Update Schedule and Versions