About SharonVEC

SharonVEC · 2024-03-28

Hello,I have a project created with STM32CubeIDE that includes FreeRTOS.A Black Duck vulnerability scan was made on this project and a single vulnerability (CVE-2021-3420) was detected.This vulnerability describes a flaw in Newlib 3.3.0 (all versions...

SharonVEC · 2024-04-17

@CMYL @Pavel A. Sorry for my late reply.Thank you very much for your response, I was skeptical but upgrading the toolchain to 12.3 rel1 removed the vulnerability issue.I am a bit flustered about why this solved the issue since from my understanding t...

SharonVEC · 2024-03-28

@Pavel A. Thank you for your response.In my Black Duck scan, a newer version of newlib is indeed being detected (4.1.0) which is probably from the releases you are referencing.This version indeed does not include a vulnerability and is being referenc...

User statistics

User Activity

Newlib 3.3.0 vulnerability

Re: Newlib 3.3.0 vulnerability

Re: Newlib 3.3.0 vulnerability