Lenovo uses System Update to patch serious System Update security hole                            
        
            
                
        
        
                    May 11, 2015
                    
                
                
                    0
                
            Responsible disclosure and an exploitable hole closed neatly through the exploitable process itself.
Result! (But make sure you’ve patched.)
Source: Sophos