diff --git a/micropython b/micropython
index a2de50f..1a105a4 160000
--- a/micropython
+++ b/micropython
@@ -1 +1 @@
-Subproject commit a2de50f788d6e3110ac57e439bca1ae23ab586d4115f671204c60ed759c6efd8
+Subproject commit 1a105a4362c062d3ab3b33c78cf28cc4a8087c5a908c1284112c3c7e16c533ee
diff --git a/patchinfo.20260209151441438275.93181000773252/_patchinfo b/patchinfo.20260209151441438275.93181000773252/_patchinfo
new file mode 100644
index 0000000..ef24163
--- /dev/null
+++ b/patchinfo.20260209151441438275.93181000773252/_patchinfo
@@ -0,0 +1,26 @@
+<patchinfo>
+  <issue tracker="cve" id="2026-1998"/>
+  <issue tracker="bnc" id="1257803">VUL-0: CVE-2026-1998: micropython: segmentation fault in `mp_map_lookup` via `mp_import_all`</issue>
+  <packager>dheidler</packager>
+  <rating>low</rating>
+  <category>security</category>
+  <summary>Security update for micropython</summary>
+  <description>This update for micropython fixes the following issues:
+
+Changes in micropython:
+
+- CVE-2026-1998: Fixed segmentation fault in `mp_map_lookup` via `mp_import_all` (bsc#1257803).
+
+- Version 1.26.1
+  * esp32: update esp_tinyusb component to v1.7.6
+  * tools: add an environment variable MICROPY_MAINTAINER_BUILD
+  * esp32: add IDF Component Lockfiles to git repo
+  * shared/tinyusb: fix hang from new tx_overwritabe_if_not_connected flag
+  * shared/tinyusb/mp_usbd_cdc: rewrite USB CDC TX loop
+  * tools/mpremote: don't apply Espressif DTR/RTS quirk to TinyUSB CDC dev
+
+- Fix building on single core systems
+  * Skip tests/thread/stress_schedule.py when single core system detected
+</description>
+  <package>micropython</package>
+</patchinfo>