eclipse-threadx/netxduo v6.5.1.202602_rel

Eclipse ThreadX NetX Duo v6.5.1.202602

on GitHub

Eclipse NetX Duo 6.5.1.202602 Release Notes

This release delivers substantial improvements to BSD socket support, significant advances in TLS/security with RSA-PSS and X.509 enhancements, and several targeted bug fixes across the networking and crypto stacks.

We thank PR electronics, Rockwell Automation, and T3S Solutions for their valuable contributions to this release.

Vulnerabilities Addressed

The link below and the CVE number will become available once the vulnerability is officially published. Please refer to the commit in the meantime for more details.

CVE-2026-xxxxx Cleanup path unconditionally calls fx_file_close() on unopened file Commit: f7ac775

You can access advisories for previously addressed vulnerabilities here.

Highlights

BSD Socket Enhancements

Three BSD socket improvements were contributed in this release: (#374, #375, #376, @mzgrebnak)

• recvfromto support has been added, along with a stricter nx_bsd_inet_aton that rejects address formats other than four dot-separated numbers.
• select improvements: exception notification support has been added, and the nx_bsd_accept return value has been corrected.
• Socket options: SO_LINGER is now supported, and nx_bsd_setsockopt has been aligned withnx_bsd_getsockopt for consistency.

TLS and Security Improvements

• RSA-PSS signature verification: RSA-PSS (RFC 8017 §8.1) signature verification support has been added, enabling TLS 1.3 compliance with RSA certificates as required by RFC 8446 §4.2.3. (#377, @EdouardMALOT)
• ASN.1 GeneralizedTime: X.509 certificate parsing now supports the GeneralizedTime format in addition to UTCTime, and notBefore and notAfter fields may now use different time formats. (#267, @sjscymru)
• PSK fix: Several issues in the PSK implementation have been corrected, including a bug where the PSK identity in ClientKeyExchange defaulted to the first store entry instead of the matching one. (#386, @fdesbiens, building on initial work by @tkEmLogic in #379)
• HKDF fix: The shift direction when deriving nx_crypto_hkdf_ikm_length from key_size_in_bits in_nx_crypto_method_hkdf_init has been corrected from left-shift to right-shift. (#265, @sjscymru)

Other Bug Fixes

• FTP server: the logout callback is now consistently invoked on client timeout, mirroring the behaviour on client disconnect. (#372, @vb-linetco)
• Fixed a compile error when NX_DEBUG is enabled. (#252, @madsknielsen)

New Contributors

• @mzgrebnak made their first contribution in #374
• @vb-linetco made their first contribution in #372
• @EdouardMALOT made their first contribution in #377
• @madsknielsen made their first contribution in #252

Full Changelog: v6.5.0.202601_rel...v6.5.1.202602_rel