Lenovo uses System Update to patch serious System Update security hole

Responsible disclosure and an exploitable hole closed neatly through the exploitable process itself. Result! (But make sure you’ve patched.)