This release addresses a denial-of-service vulnerability in the IPv6 stack.
Important notice about version numbers
In the past, new versions of ThreadX and its companion components (NextX Duo, USBX, FileX, GUIX, LevelX) were published only when there were changes to the codebase. This led to discrepancies in version numbers across components. The Eclipse Foundation security team recommended that we move away from this approach, as it makes it harder to track things from a cybersecurity standpoint.
Going forward, we will keep version numbers aligned by publishing a new version of every component every quarter — whether there have been changes to the codebase or not. The release notes will clearly state if a specific release is simply a version number update.
For this particular release of NetX Duo, the version number jumped from v.6.4.4 to v.6.4.5 since NetX Duo was the component with the highest version number already.
Vulnerabilities addressed (Link will only work once the Eclipse Security team publishes the advisory)
CVE-2025-55102 Eclipse ThreadX NetX Duo IPv6 denial of service
Full Changelog: v6.4.4.202503a...v6.4.5.202504