Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:20199-1

Опубликовано: 11 фев. 2026
Источник: suse-cvrf

Описание

Security update for micropython

This update for micropython fixes the following issues:

Changes in micropython:

  • CVE-2026-1998: Fixed segmentation fault in mp_map_lookup via mp_import_all (bsc#1257803).

  • Version 1.26.1

    • esp32: update esp_tinyusb component to v1.7.6
    • tools: add an environment variable MICROPY_MAINTAINER_BUILD
    • esp32: add IDF Component Lockfiles to git repo
    • shared/tinyusb: fix hang from new tx_overwritabe_if_not_connected flag
    • shared/tinyusb/mp_usbd_cdc: rewrite USB CDC TX loop
    • tools/mpremote: don't apply Espressif DTR/RTS quirk to TinyUSB CDC dev

  • Fix building on single core systems

    • Skip tests/thread/stress_schedule.py when single core system detected

Список пакетов

openSUSE Leap 16.0
micropython-1.26.1-bp160.1.1
mpremote-1.26.1-bp160.1.1
mpy-tools-1.26.1-bp160.1.1

Ссылки

Описание

A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation causes memory corruption. The attack needs to be launched locally. The exploit has been published and may be used. Patch name: 570744d06c5ba9dba59b4c3f432ca4f0abd396b6. It is suggested to install a patch to address this issue.

Затронутые продукты
openSUSE Leap 16.0:micropython-1.26.1-bp160.1.1
openSUSE Leap 16.0:mpremote-1.26.1-bp160.1.1
openSUSE Leap 16.0:mpy-tools-1.26.1-bp160.1.1
Ссылки