SUSE alert openSUSE-SU-2026:20199-1 (micropython)

From:
             
 
null@suse.de
To:
             
 
security-announce@lists.opensuse.org
Subject:
             
 
openSUSE-SU-2026:20199-1: low: Security update for micropython
Date:
             
 
Thu, 12 Feb 2026 17:52:17 +0100
Message-ID:
             
 
<20260212165217.3BDF4FD85@maintenance.suse.de>
Archive-link:
             
 
Article
openSUSE security update: security update for micropython
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:20199-1
Rating: low
References:

  * bsc#1257803



Cross-References:

  * CVE-2026-1998



Affected Products:

         openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves one vulnerability and has one bug fix can now be installed.

Description:

This update for micropython fixes the following issues:

Changes in micropython:

- CVE-2026-1998: Fixed segmentation fault in `mp_map_lookup` via `mp_import_all` (bsc#1257803).

- Version 1.26.1
  * esp32: update esp_tinyusb component to v1.7.6
  * tools: add an environment variable MICROPY_MAINTAINER_BUILD
  * esp32: add IDF Component Lockfiles to git repo
  * shared/tinyusb: fix hang from new tx_overwritabe_if_not_connected flag
  * shared/tinyusb/mp_usbd_cdc: rewrite USB CDC TX loop
  * tools/mpremote: don't apply Espressif DTR/RTS quirk to TinyUSB CDC dev

- Fix building on single core systems
  * Skip tests/thread/stress_schedule.py when single core system detected


Patch instructions:

   To install this openSUSE security update use the suse recommended installation methods
   like YaST online_update or "zypper patch".
   Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

   zypper in -t patch openSUSE-Leap-16.0-packagehub-122=1

Package List:

- openSUSE Leap 16.0:

  micropython-1.26.1-bp160.1.1
  mpremote-1.26.1-bp160.1.1
  mpy-tools-1.26.1-bp160.1.1

References:

  * https://www.suse.com/security/cve/CVE-2026-1998.html