Lenovo, AMI and Insyde have released patches for LogoFAIL, an image library poisoning attack.