OpenHarmony 4.1.4 Release

Version Overview

OpenHarmony 4.1.4 Release provides enhanced system security over OpenHarmony 4.1.3 Release by rectifying certain known vulnerabilities in open-source components such as Linux kernel, and system stability issues.

Mapping relationship

Table 1 Version mapping of software and tools

Software/Tool	Version	Remarks
OpenHarmony	4.1.4 Release	NA
Public SDK	Ohos_sdk_public 4.1.10.5 (API Version 11 Release)	This toolkit is intended for application developers and does not contain system APIs that require system permissions.
(Optional) HUAWEI DevEco Studio	4.1 Release	Recommended for developing OpenHarmony applications. How to obtain: SHA-256 checksum: c46be4f3cfde27af1806cfc9860d9c366e66a20e31e15180cf3a90ab05464650 SHA-256 checksum: 15d6136959b715e4bb2160c41d405b889820ea26ceadbb416509a43e59ed7f09 SHA-256 checksum: ac04ca7c2344ec8f27531d5a59261ff037deed2c5a3d42ef88e6f90f4ed45484
(Optional) HUAWEI DevEco Device Tool	4.0 Release	Recommended for developing OpenHarmony smart devices Click here.

Source Code Acquisition

Prerequisites

Install the git client and git-lfs, and configure user information.

git config --global user.name "yourname"
git config --global user.email "your-email-address"
git config --global credential.helper store

Install the repo tool.

curl -s https://gitcode.com/oschina/repo/raw/fork_flow/repo-py3 > /usr/local/bin/repo  # If you do not have the permission, download the tool to another directory and add that directory to environment variables. chmod a+x /usr/local/bin/repo
pip3 install -i https://repo.huaweicloud.com/repository/pypi/simple requests

Acquiring Source Code Using the repo Tool

Method 1: Using SSH (Recommended)

This method requires an SSH public key for access to Gitee.

Obtain the source code from the specified version tag, which is the same as that released with the version.

repo init -u git@gitcode.com:openharmony/manifest.git -b refs/tags/OpenHarmony-v4.1.4-Release --no-repo-verify
repo sync -c
repo forall -c 'git lfs pull'

Method 2

Use the repo tool to download the source code over HTTPS.

Obtain the source code from the specified version tag, which is the same as that released with the version.

repo init -u https://gitcode.com/openharmony/manifest -b refs/tags/OpenHarmony-v4.1.4-Release --no-repo-verify
repo sync -c
repo forall -c 'git lfs pull'

Acquiring Source Code from Mirrors

Table 2 Mirrors for acquiring source code

Source Code	Version	Mirror	SHA-256 Checksum	Software Package Size
Full code base (for mini, small, and standard systems)	4.1.4 Release	Download	Download	36.4 GB
Hi3861 solution (binary)	4.1.4 Release	Download	Download	27.1 MB
Hi3516 solution-LiteOS (binary)	4.1.4 Release	Download	Download	320.2 MB
Hi3516 solution-Linux (binary)	4.1.4 Release	Download	Download	215.1 MB
RK3568 standard system solution (binary)	4.1.4 Release	Download	Download	8.4 GB
Public SDK package for the standard system (macOS)	4.1.10.5	Download	Download	913.3 MB
Public SDK package for the standard system (macOS-M1)	4.1.10.5	Download	Download	884.0 MB
Public SDK package for the standard system (Windows/Linux)	4.1.10.5	Download	Download	2.2 GB

What's New

N/A

Fixed Bugs and Security Issues

Table 3 Resolved issues

Issue No.	Description
IC3RPF	Added null detection and deinitialization.
IC4D1Q	Addressed IPC security issues.
IC4FOW	[DSoftBus] Fixed security vulnerabilities in transmission code.
IBLSXD	Resolved the issue of repeated use of security control scId.
IC2SOO	Code updated to 4.1.
IC2V5S	Synchronized RemoteObjectTranslateWhenRcv issue to 4.1.
IC1FQC	Addressed security coding issues (0415).
IC179F	Modified scrollbar compilation warnings.
IC14FS	Fixed array out-of-bounds in Dialog.
IBYLBN	Fixed stack overflow issues for 4.1.
IBTUSR	Integrated fixes for three vulnerabilities into 4.1.
IBGXUO	[RK3568] Addressed the issue where the cloudfileservice process does not automatically exit after being triggered by a camera recording event.
IBT30S	Fixed nullptr bug in 4.1.
IBQY5G	Addressed FD leak issues.
IBQTJP	Fixed multithreading issues for zero-service installation in 4.1.
IBR3V5	[DSoftBus] [Transmission] Optimized FD leakage.
IBP0R4	Rectified array out-of-bounds in init_group_manager.c for 4.1.

Table 4 Fixed security vulnerabilities

Issue No.	Description
IC50QY	[Vulnerability] 4.1-Release CVE patch synchronized
IBXXSV	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2025-27363 in the openeuler:freetype component
IC1YRZ	[Vulnerability] [OpenHarmony-4.1-Release] CVE patches incorporated
IBXXSW	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-8176 in the openeuler:expat component
IBXWML	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-57981 in the Linux kernel component
IBXWN5	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2025-21764 in the Linux kernel component
IBXWNB	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2025-21785 in the Linux kernel component
IBT0OJ	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2022-48657 in the Linux kernel component
IBT0UG	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-57798 in the Linux kernel component
IBT0XE	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-57884 in the Linux kernel component
IBT0Z1	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-57888 in the Linux kernel component
IBT0ZN	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-57913 in the Linux kernel component
IBT11B	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-58005 in the Linux kernel component
IBT12A	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2025-21648 in the Linux kernel component
IBT12Y	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2025-21728 in the Linux kernel component
IBT13J	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2025-21814 in the Linux kernel component
IBXWM0	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2022-49046 in the Linux kernel component
IBXWM2	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2022-49135 in the Linux kernel component
IBXWM4	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2022-49443 in the Linux kernel component
IBXWM6	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2022-49630 in the Linux kernel component
IBXWM7	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2022-49632 in the Linux kernel component
IBXWMB	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2022-49651 in the Linux kernel component
IBXWMC	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-57977 in the Linux kernel component
IBXWMJ	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-57980 in the Linux kernel component
IBXWMP	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-58017 in the Linux kernel component
IBXWMQ	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-58020 in the Linux kernel component
IBXWMT	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-58058 in the Linux kernel component
IBXWMY	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2025-21760 in the Linux kernel component
IBXWN1	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2025-21762 in the Linux kernel component
IBXWN7	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2025-21776 in the Linux kernel component
IBW4JQ	[Vulnerability] [OpenHarmony-4.1-Release] vul-901221769187168256
IBZWP0	[Vulnerability] CVE synchronized from master to 4.1-Release
IBZA9I	[Vulnerability] CVE synchronized from master to 4.1-Release
IBVOLV	[Vulnerability] [OpenHarmony-4.1-Release] vul-901929006431997952
IBY0M9	[Vulnerability] [OpenHarmony-4.1-Release] CVE patches incorporated
IBWHEH	[Vulnerability] [OpenHarmony-4.1-Release] vul-905293076359024640
IBWHG7	[Vulnerability] [OpenHarmony-4.1-Release] vul-905292975204995072
IBWHIW	[Vulnerability] [OpenHarmony-4.1-Release] vul-905292389982146560
IBT05Z	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-31755 in the third_party_cJSONl component
IBRFCU	[Vulnerability] [OpenHarmony-4.1-Release] CVE patches incorporated
IBIH4L	[Vulnerability] [OpenHarmony-4.1-Release] CVE-864686037719322624
IBIH4V	[Vulnerability] [OpenHarmony-4.1-Release] CVE-864685912552902656