Today I ran Lenovo's System Update on my ThinkPad W541 laptop (windows 10) to try to fix a problem unrelated to this question. In the readme of the latest version (9.0.0.6 Released 2017/09/27) of Hotkey Features Integration there was a fix which I found alarming. (In bold below)
Summary of Changes
Where: < > Package version number
[Important] Important update
(New) New function or enhancement
(Fix) Correction to existing functionVersion 9.0.0.6
- (FIX) Fixed CapsLock and NumLock OSD issue that the screen configuration setting function in display adaptor properties control panel may not work.
- (FIX) Fixed issue that contents of Keyboard Manager application selector dialog may include some unknown software.
What does this mean? Is it simply a security vulnerability (like the notepad++ CIA hack) where a malicious piece of software could hook itself into the keyboard driver or is it worse and a malicious and unknown software had been packaged in the previous version of the driver? How can someone get more information about a change like this?
Lenovo lists this as an Optional Update in its System Update app (the lowest of three priority categories). But the language of the fix sounds more serious than optional to me.
3 Reset to default
