I have a T440s. CVE-2017-5689 / INTEL-SA-00075 is looming. Lenovo released updates:
Their motherboard BIOS updates usually have both a Windows-required option, and a live USB update option. However this one only has the Windows-required option, as I'm checking now. They haven't even released updates for all hardware models so maybe things are just in the works, but they haven't indicated so in anything I've seen.
In the mean time, I found these instructions on some wiki:
But they seem involved and somewhat confusing, and I'm wondering if it's outdated besides. Being a wiki it could change, but it currently seems to say I need to:
- Install Windows PE on a USB stick
- Extract 2 files from some other firmware file from IBM's website using Wine:
- A CMD I'll run to do the update
- A driver I need to figure out how to load.
This seems sketchy to me. Can anybody corroborate this? Is there another way to go about it?
On a side note, isn't Lenovo a little more responsible than this to take care of flaws in its product? Or did I agree somewhere in a contract that I only run Windows? The lack of support, transparency, and preparedness seems completely unacceptable to me for such a serious defect in their product.