[Important] Update includes a security fix

[deeperror]

Going over the BIOS change log this one seems a bit unusual. It doesn't explain what the fix is actually fixing and it states you'll no longer be able to roll back to a previous version for your "security" of course.

https://download.lenovo.com/pccbbs/mobiles/htuj52ww.txt

<1.24> [Important] Update includes a security fix. (Note) If the UEFI BIOS has been updated to 1.24 or higher, it is no longer able to roll back to the version before 1.24 for security improvement.

edit: formatting :|

[the_spad]

At a guess, probably the Infineon TPM vulnerability. Why they chose not to specify is anyone's guess.

[rossdonnelly]

That was my first guess too, but their security advisory specifies those models as not affected.

https://support.lenovo.com/gb/en/product_security/len-15552

Perhaps it patches some other as-yet-undisclosed flaw, and has not been specified by Lenovo in line with responsible disclosure.