cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
D000D
Punch Card
Posts: 32
Registered: ‎03-15-2014
Location: US
Views: 5,258
Message 1 of 24

Yoga 2 Pro: BIOS update to addres Spectre and Meltdown Vulnerability

What is the status for getting a BIOS update for the Yoga 2 Pro (Type 80AY) that will address the Spectre and Meltdown security vulnerabilities. I know that Intel pulled the micro code updates, so I expect it may take awhile. Please provide a status report that indictes when/if the Yoga 2 Pro will be updated.  Thank you.

Community SeniorMod
Community SeniorMod
Posts: 9,230
Registered: ‎01-01-2010
Location: US
Views: 5,158
Message 2 of 24

Re: Yoga 2 Pro: BIOS update to addres Spectre and Meltdown Vulnerability

I read somewhere that Intel is trying to get some of the updates re-released this weekend, but nobody will know until the updates appear.


Rich


I do not respond to requests for private, one-on-one help. Your questions should be posted in the appropriate forum where they may help others as well.

If a response answers your question, please mark it as the accepted solution.

I am not an employee or agent of Lenovo.
Birraque
802.11n
Posts: 205
Registered: ‎06-04-2015
Location: BR
Views: 5,123
Message 3 of 24

Re: Yoga 2 Pro: BIOS update to addres Spectre and Meltdown Vulnerability

[Moderator Note:  Posting edited to conform to the Community Guidelines.]

 

Dear richk,
 
While Intel has now issued Firmware updates for CPUs introduced in the past 5 years, Lenovo Yoga 2 Pro (20266 / 80AY) - Intel Core i7 4500U Haswell with "only" 3 years old isn't even listed under Lenovo End-Of-Life List or Lenovo Security Advisory LEN-18282 (NO ETA FOR US) as detailed HERE.
Please Lenovo keep us safe supporting your costumers with a proper Firmware update to address Spectre ASAP.
Could you please push Lenovo Engineering Team to show some commitment and provide this clarification statement?

 

Regards,

Community SeniorMod
Community SeniorMod
Posts: 9,230
Registered: ‎01-01-2010
Location: US
Views: 5,081
Message 4 of 24

Re: Yoga 2 Pro: BIOS update to addres Spectre and Meltdown Vulnerability

I am just a user like you.  I have no way to press Intel to do anything.


Rich


I do not respond to requests for private, one-on-one help. Your questions should be posted in the appropriate forum where they may help others as well.

If a response answers your question, please mark it as the accepted solution.

I am not an employee or agent of Lenovo.
Community SeniorMod
Community SeniorMod
Posts: 3,308
Registered: ‎12-01-2007
Location: US
Views: 5,062
Message 5 of 24

Re: Yoga 2 Pro: BIOS update to addres Spectre and Meltdown Vulnerability

Hello,

 

This is primarily a user-to-user support forum staffed with volunteers like and myself.

 

If you would like the latest information from Lenovo on the status of patches to fix the vulnerability, visit Lenovo's advisory page at:

 

https://support.lenovo.com/uu/en/solutions/len-18282

 

That is the one place where all the information is being, tracked, shared and updated as new information becomes available.  It is updated every 1-2 business days, and sometimes twice a day.

 

If you would like to speak with Lenovo support to open a ticket, you can call them toll-free at +1 (800) 426-7378 in the United States or +1 (800) 565-3344 in Canada.  If you need a phone number for another country and are unable to locate it, please let me know and I'll try to locate it for you.

 

Lenovo cannot do anything until Intel has fixed the problem which caused the updates to be withdrawn, tested the fix and verified the fix.  Even then, Lenovo will have to contact their own tests to try and avoid a repeat of releasing and then withdrawing the updates.

 

Regards,

 

Aryeh Goretsky

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP72 (20MB-*)P50 (20EN-*)S230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)Yoga 370

  Communities:   English    Deutsche    Español    Português    Русскоязычное    Česká    Slovenská    Українська   Język Polski    Moto English

D000D
Punch Card
Posts: 32
Registered: ‎03-15-2014
Location: US
Views: 5,025
Message 6 of 24

Re: Yoga 2 Pro: BIOS update to addres Spectre and Meltdown Vulnerability


@goretsky wrote:

Hello,

 

This is primarily a user-to-user support forum staffed with volunteers like and myself.

 

If you would like the latest information from Lenovo on the status of patches to fix the vulnerability, visit Lenovo's advisory page at:

 

https://support.lenovo.com/uu/en/solutions/len-18282

 

That is the one place where all the information is being, tracked, shared and updated as new information becomes available.  It is updated every 1-2 business days, and sometimes twice a day.

 

If you would like to speak with Lenovo support to open a ticket, you can call them toll-free at +1 (800) 426-7378 in the United States or +1 (800) 565-3344 in Canada.  If you need a phone number for another country and are unable to locate it, please let me know and I'll try to locate it for you.

 

Lenovo cannot do anything until Intel has fixed the problem which caused the updates to be withdrawn, tested the fix and verified the fix.  Even then, Lenovo will have to contact their own tests to try and avoid a repeat of releasing and then withdrawing the updates.

 

Regards,

 

Aryeh Goretsky

 


Your reply, while appreciated, misses the point.

 

By now owners of the Yoga 2 Pro are well aware of the list at the link you provided. The source of our frustration is that the Yoga 2 Pro is not listed anywhere on that list. Therefore, we have no information whatsoever that indicates if the Yoga 2 Pro will receive an update that addresses both the Spectre and Meltdown vulnerabilities, or not.

 

At the very least Lenovo should be communicating whether or not the Yoga 2 Pro will be receiving an update. We fully understand that this will require Intel to release such a patch for our CPU's before the BIOS update can be provided. We just want assurance that we will be getting a patch in the forseeable future.

Community SeniorMod
Community SeniorMod
Posts: 3,308
Registered: ‎12-01-2007
Location: US
Views: 5,010
Message 7 of 24

Re: Yoga 2 Pro: BIOS update to addres Spectre and Meltdown Vulnerability

Hello,

 

I have numerous Lenovo computers besides the ones listed in my signature for which there has not yet been any announcement of patch status.  This is not unique to Lenovo; I have systems from other vendors like ASRock, Asus, Dell and HP for which I'm waiting on any kind of notification. 

 

System vendors have to verify that all they patches they receive from AMD, ARM and Intel work correctly on all the models they have sold.  For some systems, there may be additional work that needs to be done to verify compatibility, address performance or stability issues and so forth.

 

Until that kind of work is complete, it is going to be very difficult to announce if and when a particular system is going to receive a patch.

 

Regards,

 

Aryeh Goretsky

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP72 (20MB-*)P50 (20EN-*)S230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)Yoga 370

  Communities:   English    Deutsche    Español    Português    Русскоязычное    Česká    Slovenská    Українська   Język Polski    Moto English

Community SeniorMod
Community SeniorMod
Posts: 3,308
Registered: ‎12-01-2007
Location: US
Views: 4,929
Message 8 of 24

Re: Yoga 2 Pro: BIOS update to addres Spectre and Meltdown Vulnerability

[Moderator Comment:  A post has been removed for failing to conform to the Community Guidelines.]



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP72 (20MB-*)P50 (20EN-*)S230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)Yoga 370

  Communities:   English    Deutsche    Español    Português    Русскоязычное    Česká    Slovenská    Українська   Język Polski    Moto English

Birraque
802.11n
Posts: 205
Registered: ‎06-04-2015
Location: BR
Views: 4,765
Message 9 of 24

Re: Yoga 2 Pro: BIOS update to addres Spectre and Meltdown Vulnerability

Dear Lenovo,

 

Intel releases new Spectre patches for PCs

Yoga 2 Pro (20266) owners still waiting Lenovo show some commitment with their customers to address this vulnerability listing our model into Lenovo Security Advisory LEN-18282 for future Firmware Update.

 

Regards,

 

Mod's Comment: Please do not start multiple posts on same issue as this only splinters the discussion. Instead, keep your current discussion updated with any additional information. Your duplicate has been removed. Thanks !

 

Birraque
802.11n
Posts: 205
Registered: ‎06-04-2015
Location: BR
Views: 4,648
Message 10 of 24

Re: Yoga 2 Pro: BIOS update to addres Spectre and Meltdown Vulnerability

Check out current deals!


Shop current deals

Top Kudoed Authors