From dc70bd8a7d9ad0484c7836c1d8fc24d9be38ef3f3ae9b25a320e385e72cecd47 Mon Sep 17 00:00:00 2001 From: Robert Frohl Date: Tue, 10 Feb 2026 18:05:44 +0100 Subject: [PATCH 1/2] Update micropython --- micropython | 2 +- .../_patchinfo | 26 +++++++++++++++++++ 2 files changed, 27 insertions(+), 1 deletion(-) create mode 100644 patchinfo.20260209151441438275.93181000773252/_patchinfo diff --git a/micropython b/micropython index a2de50f..1a105a4 160000 --- a/micropython +++ b/micropython @@ -1 +1 @@ -Subproject commit a2de50f788d6e3110ac57e439bca1ae23ab586d4115f671204c60ed759c6efd8 +Subproject commit 1a105a4362c062d3ab3b33c78cf28cc4a8087c5a908c1284112c3c7e16c533ee diff --git a/patchinfo.20260209151441438275.93181000773252/_patchinfo b/patchinfo.20260209151441438275.93181000773252/_patchinfo new file mode 100644 index 0000000..25c4a83 --- /dev/null +++ b/patchinfo.20260209151441438275.93181000773252/_patchinfo @@ -0,0 +1,26 @@ + + VUL-0: CVE-2026-1998: micropython: segmentation fault in `mp_map_lookup` via `mp_import_all` + VUL-0: CVE-2026-1998: micropython: segmentation fault in `mp_map_lookup` via `mp_import_all` + dheidler + low + security + Security update for micropython + This update for micropython fixes the following issues: + +Changes in micropython: + +- CVE-2026-1998: Fixed segmentation fault in `mp_map_lookup` via `mp_import_all` (bsc#1257803). + +- Version 1.26.1 + * esp32: update esp_tinyusb component to v1.7.6 + * tools: add an environment variable MICROPY_MAINTAINER_BUILD + * esp32: add IDF Component Lockfiles to git repo + * shared/tinyusb: fix hang from new tx_overwritabe_if_not_connected flag + * shared/tinyusb/mp_usbd_cdc: rewrite USB CDC TX loop + * tools/mpremote: don't apply Espressif DTR/RTS quirk to TinyUSB CDC dev + +- Fix building on single core systems + * Skip tests/thread/stress_schedule.py when single core system detected + + micropython + -- 2.51.1 From 62c3a6df172b012f5ae19cb282b75e2004b110344b375df250985a8cbea2c796 Mon Sep 17 00:00:00 2001 From: Robert Frohl Date: Tue, 10 Feb 2026 18:07:27 +0100 Subject: [PATCH 2/2] Update patchinfo.20260209151441438275.93181000773252/_patchinfo minimize CVE issue xml element --- patchinfo.20260209151441438275.93181000773252/_patchinfo | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/patchinfo.20260209151441438275.93181000773252/_patchinfo b/patchinfo.20260209151441438275.93181000773252/_patchinfo index 25c4a83..ef24163 100644 --- a/patchinfo.20260209151441438275.93181000773252/_patchinfo +++ b/patchinfo.20260209151441438275.93181000773252/_patchinfo @@ -1,5 +1,5 @@ - VUL-0: CVE-2026-1998: micropython: segmentation fault in `mp_map_lookup` via `mp_import_all` + VUL-0: CVE-2026-1998: micropython: segmentation fault in `mp_map_lookup` via `mp_import_all` dheidler low -- 2.51.1