Update Info

openSUSE-2026-50


Security update for micropython


Type: security
Severity: low
Issued: 2026-02-14
Description:
This update for micropython fixes the following issues:

- CVE-2026-1998: Fixed a segmentation fault in 'mp_map_lookup' via 'mp_import_all' (boo#1257803)

- Version 1.26.1
  * esp32: update esp_tinyusb component to v1.7.6
  * tools: add an environment variable MICROPY_MAINTAINER_BUILD
  * esp32: add IDF Component Lockfiles to git repo
  * shared/tinyusb: fix hang from new tx_overwritabe_if_not_connected flag
  * shared/tinyusb/mp_usbd_cdc: rewrite USB CDC TX loop
  * tools/mpremote: don't apply Espressif DTR/RTS quirk to TinyUSB CDC dev

- Fix building on single core systems
  * Skip tests/thread/stress_schedule.py when single core system detected

- Build with mbedtls-3.6.5 instead of bundled 3.6.2 to fix CVE-2025-59438

- Version 1.26.0
  * Added machine.I2CTarget for creating I2C target devices on multiple ports.
  * New MCU support: STM32N6xx (800 MHz, ML accel) and ESP32-C2 (WiFi + BLE).
  * Major float accuracy boost (~28% ~98%), constant folding in compiler.
  * Optimized native/Viper emitters; reduced heap use for slices.
  * Time functions standardized (1970 2099); new boards across ESP32, SAMD, STM32, Zephyr.
  * ESP32: ESP-IDF 5.4.2, flash auto-detect, PCNT class, LAN8670 PHY.
  * RP2: compressed errors, better lightsleep, hard IRQ timers.
  * Zephyr v4.0.0: PWM, SoftI2C/SPI, BLE runtime services, boot.py/main.py support.
  * mpremote adds fs tree, improved df, portable config paths.
  * Updated lwIP, LittleFS, libhydrogen, stm32lib; expanded hardware/CI tests.


              

Packages


  • micropython-1.26.1-bp157.5.1