This release fixes a typo in the name of one of the common constants. It also addresses a security vulnerability in the POSIX compatibility layer.
Important notice about version numbers
In the past, new versions of ThreadX and its companion components (NextX Duo, USBX, FileX, GUIX, LevelX) were published only when there were changes to the codebase. This led to discrepancies in version numbers across components. The Eclipse Foundation security team recommended that we move away from this approach, as it makes it harder to track things from a cybersecurity standpoint.
Going forward, we will keep version numbers aligned by publishing a new version of every component every quarter — whether there have been changes to the codebase or not. The release notes will clearly state if a specific release is simply a version number update.
For this particular release of ThreadX, the version number jumped from v.6.4.3 to v.6.4.5 to catch up with NetX Duo.
What's Changed
Vulnerabilities addressed (Link will only work once the Eclipse Security team publishes the advisory)
CVE-2026-0648 Persistent Initialisation Pointer Corruption in the POSIX Compatibility Layer
New Contributors
Full Changelog: v6.4.3.202503_rel...v6.4.5.202504_rel