Newer ThreadX versions

[mo_krauti]

Hello,

do you plan to release newer version of Eclipse ThreadX X-Cube packages?

We are using x-cube-azrtos-f7 1.1.0 which contains ThreadX V6.1.10 which is outdated and insecure.

Even remote code execution is possible: https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-m2rx-243p-9w64 and eclipse foundation only provides security support for ThreadX v6.4.x.

Sincerely

Mo

[Dor_RH]

Hello @mo_krauti,

I reported this internally.

Internal ticket number: 209505 (This is an internal tracking number and is not accessible or usable by customers).

Thanks for your contribution.

Dor_RH

[Dor_RH]

Hello @mo_krauti,

A comprehensive answer addressing this topic has been provided, outlining the strategic directions for STM32Cube and offering more insight into our plans.

You can find the detailed discussion by visiting the following link: New Strategic Directions for STM32Cube.

We appreciate your engagement and hope this information helps clarify the situation.

Dor_RH

[mo_krauti]

Hi,

thank you for providing the link to the other thread.

So the main kernel will be FreeRTOS now, but does that mean that ThreadX (the OS, not FileX etc) will become unsupported and your ports will no longer be updated?

We are building an application requiring safety certifications, that is why we chose ThreadX and cannot switch to FreeRTOS.

[Dor_RH]

Hello @mo_krauti,

The RTOS and middleware versions available in STM32Cube software packages or the STM32CubeMX tool are frequently not the most recent. To obtain the latest versions maintained by ST, visit the "STM32Cube Middleware Libraries" on GitHub: STM32Cube_MCU_Overall_Offer

For Azure RTOS, the latest version is 6.4.0:

https://github.com/STMicroelectronics/stm32-mw-threadx

https://github.com/STMicroelectronics/stm32-mw-filex

https://github.com/STMicroelectronics/stm32-mw-levelx

https://github.com/STMicroelectronics/stm32-mw-netxduo

https://github.com/STMicroelectronics/stm32-mw-usbx

You can now also directly access the Eclipse GitHub for the latest versions: https://github.com/eclipse-threadx

If necessary, you can update your software using these latest versions.

(Note that you can refer to X-CUBE-AZRTOS-H7, updated with 6.4.0 for reference as well).

Regarding certification, artefacts formerly commercially distributed by Microsoft are now distributed by Eclipse foundation.

The latest certified versions are:

ThreadX Core (kernel) 6.1.1

ThreadX SMP Core (kernel) 6.1.3

ThreadX GUIX 6.1.7

ThreadX NetX Duo 6.1.9

ThreadX USBX 6.1.11

Related safety artefacts are available now from Eclipse foundation. Contact threadx-info@eclipse.org for pricing.

Eclipse foundation plans to certify the latest release 6.4.1 by the end of the year.

I hope my answer has helped you. When your question is answered, please select this topic as the solution that answered you, as it will help others find that answer faster.

Thanks for your contribution.

Dor_RH

[mo_krauti]

Thank you for your answer and describing the current situation.

But my question remains unanswered: Will STM continue to support their stm32 tailored mw fork of ThreadX for new releases after the current version 6.4.2?