2025-04-16 6:43 AM
Hello,
do you plan to release newer version of Eclipse ThreadX X-Cube packages?
We are using x-cube-azrtos-f7 1.1.0 which contains ThreadX V6.1.10 which is outdated and insecure.
Even remote code execution is possible: https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-m2rx-243p-9w64 and eclipse foundation only provides security support for ThreadX v6.4.x.
Sincerely
Mo
2025-05-12 6:31 AM
Hello @mo_krauti,
I reported this internally.
Internal ticket number: 209505 (This is an internal tracking number and is not accessible or usable by customers).
Thanks for your contribution.
Dor_RH
