OpenHarmony 4.1.3 Release

Version Overview

OpenHarmony 4.1.3 Release provides enhanced system security over OpenHarmony 4.1.2 Release by rectifying certain known vulnerabilities in open-source components such as Linux kernel, and system stability issues.

Mapping Relationship

Table 1 Version mapping of software and tools

Software/Tool	Version	Remarks
OpenHarmony	4.1.3 Release	NA
Public SDK	Ohos_sdk_public 4.1.9.4 (API Version 11 Release)	This toolkit is intended for application developers and does not contain system APIs that require system permissions.
(Optional) HUAWEI DevEco Studio	4.1 Release	Recommended for developing OpenHarmony applications. How to obtain: SHA-256 checksum: c46be4f3cfde27af1806cfc9860d9c366e66a20e31e15180cf3a90ab05464650 SHA-256 checksum: 15d6136959b715e4bb2160c41d405b889820ea26ceadbb416509a43e59ed7f09 SHA-256 checksum: ac04ca7c2344ec8f27531d5a59261ff037deed2c5a3d42ef88e6f90f4ed45484
(Optional) HUAWEI DevEco Device Tool	4.0 Release	Recommended for developing OpenHarmony smart devices Click here.

Source Code Acquisition

Prerequisites

Install the git client and git-lfs, and configure user information.

git config --global user.name "yourname"
git config --global user.email "your-email-address"
git config --global credential.helper store

Install the repo tool.

curl -s https://gitcode.com/oschina/repo/raw/fork_flow/repo-py3 > /usr/local/bin/repo  # If you do not have the permission, download the tool to another directory and add that directory to environment variables. chmod a+x /usr/local/bin/repo
pip3 install -i https://repo.huaweicloud.com/repository/pypi/simple requests

Acquiring Source Code Using the repo Tool

Method 1: Using SSH (Recommended)

This method requires an SSH public key for access to Gitee.

Obtain the source code from the specified version tag, which is the same as that released with the version.

repo init -u git@gitcode.com:openharmony/manifest.git -b refs/tags/OpenHarmony-v4.1.3-Release --no-repo-verify
repo sync -c
repo forall -c 'git lfs pull'

Method 2

Use the repo tool to download the source code over HTTPS.

Obtain the source code from the specified version tag, which is the same as that released with the version.

repo init -u https://gitcode.com/openharmony/manifest -b refs/tags/OpenHarmony-v4.1.3-Release --no-repo-verify
repo sync -c
repo forall -c 'git lfs pull'

Acquiring Source Code from Mirrors

Table 2 Mirrors for acquiring source code

Source Code	Version	Mirror	SHA-256 Checksum	Software Package Size
Full code base (for mini, small, and standard systems)	4.1.3 Release	Download	Download	34.8 GB
Hi3861 solution (binary)	4.1.3 Release	Download	Download	27.1 MB
Hi3516 solution-LiteOS (binary)	4.1.3Release	Download	Download	320.1 MB
Hi3516 solution-Linux (binary)	4.1.3 Release	Download	Download	215.1 MB
RK3568 standard system solution (binary)	4.1.3 Release	Download	Download	8.4 GB
Public SDK package for the standard system (macOS)	4.1.9.4	Download	Download	913.3 MB
Public SDK package for the standard system (macOS-M1)	4.1.9.4	Download	Download	884.0 MB
Public SDK package for the standard system (Windows/Linux)	4.1.9.4	Download	Download	2.2 GB

What's New

N/A

Fixed Bugs and Security Issues

Table 3 Resolved issues

Issue No.	Description
IAOH0J	[RK3568] The libuserauth_client.z.so process crashes due to the OS_IPC_2_834 thread in the foundation process.
IBE7FX	[RK3568] The cppcrash occurs in the OS_IPC_6_936 thread under the foundation process once. The crash stack is libdistributed_ability_manager_svr.z.so.
IB7TVH	[RK3568] The OS_IPC_2_784 thread under the Process name:foundation process crashes twice. The crash stack is libnet_manager_common.z.so.
IBBNLR	[RK3568] Fixed the worker memory leak.
IAPG6G	[RK3568] CloudFileService is a non-resident process and is started by the Wi-Fi scanning event loop.
IAAB5R	[RK3568] [10/10] The editable component that is set to.enabled (false) is dragged to the text component area. The component center is 8 vp above the top.
I9BKLO	[RK3568] jscrash is displayed under the com.ohos.mms process twice, and the stack name is nameClick.
IAVSNL	[RK3568] Verifying the UID when processing the edm event
IBH4N7	[RK3568] UX modification of the 4.1 release branch
IBJL5T	[RK3568] The rendering function is unavailable when nodelesses.hap is installed for the same-layer rendering test.
IBJ6EC	[RK3568] Cherry-Pick 10577 to 4.1 Release
IBJ7R4	[RK3568] Cherry-Pick 10642 to 4.1 Release
IBKK6D	[RK3568] Join Issue After Cherry-Picking PR 10501 to 4.1 Release
IBJ90O	[RK3568] Cherry-pick 10670 to 4.1Release
IBH1E9	[RK3568] A C++ crash occurs on libmodal_system_ui_extension_client.z.so due to an error of the OS_FFRT_2_0 thread of the foundation process. This issue occurs twice.
IBIZ14	[RK3568] The vulnerability is incorporated into the OpenHarmony-4.1-Release branch.
IBIWKU	[RK3568] Cherry-Pick bug fix to 4.1
IBI74E	[RK3568] Fixed risky vulnerabilities.
IBGUBD	[RK3568] Deleted redundant binary files from WorkScheduler.
IBGHNE	[RK3568] Upgrading the HapBuild Project, Deleting Redundant Files, and Replacing the Signing Tool
IBGJHO	[RK3568] The editable component that is set to.enabled(false) is dragged to the text component area. The component is 8 vp from the top center of the component.

Table 4 Fixed security vulnerabilities

Issue No.	Description
IBHYAM	[Vulnerability] [OpenHarmony-4.1-Release] CVE-871978016102682624
IBISRC	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56605 in the Linux kernel component
IBLGDX	[Vulnerability] [OpenHarmony-4.1-Release] CVE-884973832148881408
IBISTN	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56647 in the Linux kernel component
IBISOU	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56583 in the Linux kernel component
IBISPT	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-53171 in the Linux kernel component
IBISSV	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56606 in the Linux kernel component
IBISUH	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56658 in the Linux kernel component
IBISV2	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56688 in the Linux kernel component
IBISWH	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56692 in the Linux kernel component
IBISXD	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56720 in the Linux kernel component
IBISYG	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56739 in the Linux kernel component
IBISZC	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56756 in the Linux kernel component
IBIT1N	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56763 in the Linux kernel component
IBIT2H	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56769 in the Linux kernel component
IBIT3K	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56770 in the Linux kernel component
IBK84G	[Vulnerability] [OpenHarmony-4.1-Release] CVE patches incorporated
IBJSHR	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-53173 in the Linux kernel component
IBJSIV	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-56369 in the Linux kernel component
IBKPCV	[Vulnerability] [OpenHarmony-4.1-Release] CVE-887050703653048320
IBINMH	[Vulnerability] [OpenHarmony-4.1-Release] CVE-871975948294033408
IBINMC	[Vulnerability] [OpenHarmony-4.1-Release] CVE-871976081169584128
IBG37W	[Vulnerability] [OpenHarmony-4.1-Release] CVE patches incorporated
IBIKDC	[Vulnerability] [OpenHarmony-4.1-Release] CVE-879923376297086976
IBI1JO	[Vulnerability] [OpenHarmony-4.1-Release] RecvMessageDeinit in Disc_ble.c is not locked, and no upper limit is set in disc_manager.c, which poses security risks.
IBHTM4	[Vulnerability] [OpenHarmony-4.1-Release] CVE-879883602844717056
IBFEJ7	[Vulnerability] [OpenHarmony-4.1-Release] Problematic axios 1.6.2 referenced
IBFEWO	[Vulnerability] [OpenHarmony-4.1-Release] Problematic body-parser 1.20.1 and 1.20.2 referenced
IBFF0F	[Vulnerability] [OpenHarmony-4.1-Release] Problematic braces (dev) 3.0.2 referenced
IBGB67	[Vulnerability] [OpenHarmony-4.1-Release] CVE patches incorporated
IB8M92	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-50256 in the Linux kernel component
IB8L2B	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-38594 in the Linux kernel component
IBE44O	[Vulnerability] [OpenHarmony-4.1-Release] CVE patches incorporated
IBERYF	[Vulnerability] [OpenHarmony-4.1-Release] CVE-873354661225041920
IBEB48	[Vulnerability] [OpenHarmony-4.1-Release] CVE-872272903297568768
IBDWNM	[Vulnerability] [OpenHarmony-4.1-Release] CVE-871586908591886336
IBJESO	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2024-13176
IBFN54	[Vulnerability] [OpenHarmony-4.1-Release] CVE-2023-6112