1# OpenHarmony 4.1.3 Release 2 3 4## 版本概述 5 6当前版本在OpenHarmony 4.1.2 Release的基础上，主要修复了linux kernel等开源组件的安全漏洞，增强了系统安全性。修复了部分功能和系统稳定性的issue，增强了系统稳定性。 7 8## 配套关系 9 10**表1** 版本软件和工具配套关系 11 12| 软件 | 版本 | 备注 | 13| -------- | -------- | -------- | 14| OpenHarmony | 4.1.3 Release | NA | 15| Public SDK | Ohos_sdk_public 4.1.9.4 (API Version 11 Release) | 面向应用开发者提供，不包含需要使用系统权限的系统接口。 | 16| HUAWEI DevEco Studio（可选） | 4.1 Release | OpenHarmony应用开发推荐使用。获取方式：<br />[Windows(64-bit)](https://contentcenter-vali-drcn.dbankcdn.cn/pvt_2/DeveloperAlliance_package_901_9/ee/v3/HqJ-6O2FQny86xtk_dg9HQ/devecostudio-windows-4.1.0.400.zip?HW-CC-KV=V1&HW-CC-Date=20240409T033730Z&HW-CC-Expire=315360000&HW-CC-Sign=BFA444BC43A041331E695AE2CFA9035A957AF107E06C97E793FD3D31D7096A0D) <br />SHA256校验码：c46be4f3cfde27af1806cfc9860d9c366e66a20e31e15180cf3a90ab05464650<br />[Mac(X86)](https://contentcenter-vali-drcn.dbankcdn.cn/pvt_2/DeveloperAlliance_package_901_9/3b/v3/JgGp8n0bShOkm1MpBFJ73w/devecostudio-mac-4.1.0.400.zip?HW-CC-KV=V1&HW-CC-Date=20240409T034037Z&HW-CC-Expire=315360000&HW-CC-Sign=35C1F8B3FC19325EBBC32D8E11106DDB074A8ECC6BB3A77FF2EADBA2A8A223DA) <br />SHA256校验码：15d6136959b715e4bb2160c41d405b889820ea26ceadbb416509a43e59ed7f09<br />[Mac(ARM)](https://contentcenter-vali-drcn.dbankcdn.cn/pvt_2/DeveloperAlliance_package_901_9/21/v3/D7Jy1StbTwSLUXaA20VrAw/devecostudio-mac-arm-4.1.0.400.zip?HW-CC-KV=V1&HW-CC-Date=20240409T034235Z&HW-CC-Expire=315360000&HW-CC-Sign=19598AAC650D2AB24CAC6DFDF0DBD312188FB0438A8233B7687E6ACDC43A51F8) <br />SHA256校验码：ac04ca7c2344ec8f27531d5a59261ff037deed2c5a3d42ef88e6f90f4ed45484 | 17| HUAWEI DevEco Device Tool（可选） | 4.0 Release | OpenHarmony智能设备集成开发环境推荐使用。<br />[请点击这里获取](https://device.harmonyos.com/cn/develop/ide#download)。 | 18 19 20## 源码获取 21 22 23### 前提条件 24 251. 注册码云gitee帐号。 26 272. 注册码云SSH公钥，请参考[码云帮助中心](https://gitee.com/help/articles/4191)。 28 293. 安装[git客户端](https://gitee.com/link?target=https%3A%2F%2Fgit-scm.com%2Fbook%2Fzh%2Fv2%2F%25E8%25B5%25B7%25E6%25AD%25A5-%25E5%25AE%2589%25E8%25A3%2585-Git)和[git-lfs](https://gitee.com/vcs-all-in-one/git-lfs?_from=gitee_search#downloading)并配置用户信息。 30 ``` 31 git config --global user.name "yourname" 32 git config --global user.email "your-email-address" 33 git config --global credential.helper store 34 ``` 35 364. 安装码云repo工具，可以执行如下命令。 37 ``` 38 curl -s https://gitee.com/oschina/repo/raw/fork_flow/repo-py3 > /usr/local/bin/repo #如果没有权限，可下载至其他目录，并将其配置到环境变量中chmod a+x /usr/local/bin/repo 39 pip3 install -i https://repo.huaweicloud.com/repository/pypi/simple requests 40 ``` 41 42 43### 通过repo获取 44 45**方式一（推荐）** 46 47通过repo + ssh 下载（需注册公钥，请参考[码云帮助中心](https://gitee.com/help/articles/4191)）。 48 49 50从版本发布Tag节点获取源码。可获取与版本发布时完全一致的源码。 51``` 52repo init -u git@gitee.com:openharmony/manifest.git -b refs/tags/OpenHarmony-v4.1.3-Release --no-repo-verify 53repo sync -c 54repo forall -c 'git lfs pull' 55``` 56 57**方式二** 58 59通过repo + https 下载。 60 61从版本发布Tag节点获取源码。可获取与版本发布时完全一致的源码。 62``` 63repo init -u https://gitee.com/openharmony/manifest -b refs/tags/OpenHarmony-v4.1.3-Release --no-repo-verify 64repo sync -c 65repo forall -c 'git lfs pull' 66``` 67 68 69### 从镜像站点获取 70 71 72**表2** 获取源码路径 73 74| 版本源码 | **版本信息** | **下载站点** | **SHA256校验码** | **软件包容量** | 75| --------------------------------------- | ------------ | ------------------------------------------------------------ | ------------------------------------------------------------ | -------- | 76| 全量代码（标准、轻量和小型系统） | 4.1.3 Release | [站点](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/code-v4.1.3-Release.tar.gz) | [SHA256校验码](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/code-v4.1.3-Release.tar.gz.sha256) | 34.8 GB | 77| Hi3861解决方案（二进制） | 4.1.3 Release | [站点](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/hispark_pegasus.tar.gz) | [SHA256校验码](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/hispark_pegasus.tar.gz.sha256) | 27.1 MB | 78| Hi3516解决方案-LiteOS（二进制） | 4.1.3Release | [站点](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/hispark_taurus_LiteOS.tar.gz) | [SHA256校验码](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/hispark_taurus_LiteOS.tar.gz.sha256) | 320.1 MB | 79| Hi3516解决方案-Linux（二进制） | 4.1.3 Release | [站点](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/hispark_taurus_Linux.tar.gz) | [SHA256校验码](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/hispark_taurus_Linux.tar.gz.sha256) | 215.1 MB | 80| RK3568标准系统解决方案（二进制） | 4.1.3 Release | [站点](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/dayu200_standard_arm32.tar.gz) | [SHA256校验码](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/dayu200_standard_arm32.tar.gz.sha256) | 8.4 GB | 81| 标准系统Public SDK包（Mac） | 4.1.9.4 | [站点](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/ohos-sdk-mac-public.tar.gz) | [SHA256校验码](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/ohos-sdk-mac-public.tar.gz.sha256) | 913.3 MB | 82| 标准系统Public SDK包（Mac-M1） | 4.1.9.4 | [站点](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/L2-SDK-MAC-M1-PUBLIC.tar.gz) | [SHA256校验码](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/L2-SDK-MAC-M1-PUBLIC.tar.gz.sha256) | 884.0 MB | 83| 标准系统Public SDK包（Windows/Linux） | 4.1.9.4 | [站点](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/ohos-sdk-windows_linux-public.tar.gz) | [SHA256校验码](https://repo.huaweicloud.com/openharmony/os/4.1.3-Release/ohos-sdk-windows_linux-public.tar.gz.sha256) | 2.2 GB | 84 85 86## 更新说明 87 88 API接口无变更。 89 90## 修复缺陷和安全问题列表 91 92**表3** 修复缺陷ISSUE列表 93 94| ISSUE单 | 问题描述 | 95| -------- | -------- | 96| [IAOH0J](https://gitee.com/openharmony/useriam_user_auth_framework/issues/IAOH0J?from=project-issue) | 【RK3568】出现1次进程foundation下的OS_IPC_2_834线程导致libuserauth_client.z.so出现cppcrash | 97| [IBE7FX](https://gitee.com/openharmony/third_party_musl/issues/IBE7FX?from=project-issue) | 【RK3568】出现1次 进程foundation下线程OS_IPC_6_936出现cppcrash，崩溃栈： libdistributed_ability_manager_svr.z.so | 98| [IB7TVH](https://gitee.com/openharmony/communication_netmanager_base/issues/IB7TVH?from=project-issue) | 【RK3568】出现2次 进程Process name:foundation下的OS_IPC_2_784线程出现cppcrash，崩溃栈：libnet_manager_common.z.so | 99| [IBBNLR](https://gitee.com/openharmony/commonlibrary_ets_utils/issues/IBBNLR?from=project-issue) | 【RK3568】修复worker内存泄漏 | 100| [IAPG6G](https://gitee.com/openharmony/filemanagement_dfs_service/issues/IAPG6G?from=project-issue) | 【RK3568】cloudfileservice非常驻进程，被wifi扫描事件循环拉起 | 101| [IAAB5R](https://gitee.com/openharmony/arkui_ace_engine/issues/IAAB5R?from=project-issue) | 【RK3568】【必现10/10】设置.enabled(false)的可编辑组件，拖拽到文本类组件区域，组件跟手位置顶部居中8vp | 102| [I9BKLO](https://gitee.com/openharmony/applications_mms/issues/I9BKLO?from=project-issue) | 【RK3568】出现2次 进程com.ohos.mms下出现jscrash，栈名：nameClick | 103| [IAVSNL](https://gitee.com/openharmony/web_webview/issues/IAVSNL?from=project-issue) | 【RK3568】处理edm事件时对uid进行校验 | 104| [IBH4N7](https://gitee.com/openharmony/distributedhardware_device_manager/issues/IBH4N7?from=project-issue) | 【RK3568】4.1release分支UX修改 | 105| [IBJL5T](https://gitee.com/openharmony/web_webview/issues/IBJL5T?from=project-issue) | 【RK3568】安装nodelesses.hap进行同层渲染测试，渲染功能完全不可用 | 106| [IBJ6EC](https://gitee.com/openharmony/arkcompiler_ets_runtime/issues/IBJ6EC?from=project-issue) | 【RK3568】Cherry-Pick 10577 to 4.1 Release | 107| [IBJ7R4](https://gitee.com/openharmony/arkcompiler_ets_runtime/issues/IBJ7R4?from=project-issue) | 【RK3568】Cherry-Pick 10642 to 4.1 Release | 108| [IBKK6D](https://gitee.com/openharmony/arkcompiler_ets_runtime/issues/IBKK6D?from=project-issue) | 【RK3568】Cherry-Pick PR 10501 to 4.1 Release Join 问题 | 109| [IBJ90O](https://gitee.com/openharmony/arkcompiler_ets_runtime/issues/IBJ90O?from=project-issue) | 【RK3568】Cherry-pick 10670 to 4.1Release | 110| [IBH1E9](https://gitee.com/openharmony/window_window_manager/issues/IBH1E9?from=project-issue) | 【RK3568】出现2次 进程foundation下的OS_FFRT_2_0线程出现cppcrash，崩溃栈：libmodal_system_ui_extension_client.z.so | 111| [IBIZ14](https://gitee.com/openharmony/arkcompiler_ets_runtime/issues/IBIZ14?from=project-issue) | 【RK3568】漏洞合入OpenHarmony-4.1-Release分支 | 112| [IBIWKU](https://gitee.com/openharmony/arkcompiler_ets_runtime/issues/IBIWKU?from=project-issue) | 【RK3568】Cherry-Pick bug fix to 4.1 | 113| [IBI74E](https://gitee.com/openharmony/communication_dsoftbus/issues/IBI74E?from=project-issue) | 【RK3568】修复风险漏洞 | 114| [IBGUBD](https://gitee.com/openharmony/applications_app_samples/issues/IBGUBD?from=project-issue) | 【RK3568】WorkScheduler 去除冗余二进制文件 | 115| [IBGHNE](https://gitee.com/openharmony/applications_app_samples/issues/IBGHNE?from=project-issue) | 【RK3568】HapBuild 升级项目依赖版本&删除冗余文件&替换签名工具 | 116| [IBGJHO](https://gitee.com/openharmony/arkui_ace_engine/issues/IBGJHO?from=project-issue) | 【RK3568】设置.enabled(false)的可编辑组件，拖拽到文本类组件区域，组件跟手位置顶部居中8vp | 117 118**表4** 修复安全问题列表 119 120| ISSUE单 | 问题描述 | 121| :----------------------------------------------------------- | ------------------------------------------------------------ | 122| [IBHYAM](https://gitee.com/openharmony/arkcompiler_ets_runtime/issues/IBHYAM?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】 CVE-871978016102682624 | 123| [IBISRC](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISRC?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56605 | 124| [IBLGDX](https://gitee.com/openharmony/third_party_NuttX/issues/IBLGDX?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】 CVE-884973832148881408 | 125| [IBISTN](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISTN?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56647 | 126| [IBISOU](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISOU?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56583 | 127| [IBISPT](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISPT?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-53171 | 128| [IBISSV](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISSV?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56606 | 129| [IBISUH](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISUH?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56658 | 130| [IBISV2](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISV2?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56688 | 131| [IBISWH](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISWH?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56692 | 132| [IBISXD](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISXD?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56720 | 133| [IBISYG](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISYG?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56739 | 134| [IBISZC](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBISZC?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56756 | 135| [IBIT1N](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBIT1N?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56763 | 136| [IBIT2H](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBIT2H?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56769 | 137| [IBIT3K](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBIT3K?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56770 | 138| [IBK84G](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBK84G?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】4.1-Release回合cve补丁 | 139| [IBJSHR](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBJSHR?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-53173 | 140| [IBJSIV](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBJSIV?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-56369 | 141| [IBKPCV](https://gitee.com/openharmony/kernel_liteos_a/issues/IBKPCV?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】 CVE-887050703653048320 | 142| [IBINMH](https://gitee.com/openharmony/communication_dsoftbus/issues/IBINMH?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】 CVE-871975948294033408 | 143| [IBINMC](https://gitee.com/openharmony/communication_dsoftbus/issues/IBINMC?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】 CVE-871976081169584128 | 144| [IBG37W](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBG37W?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】回合cve补丁 | 145| [IBIKDC](https://gitee.com/openharmony/kernel_liteos_a/issues/IBIKDC?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】CVE-879923376297086976 | 146| [IBI1JO](https://gitee.com/openharmony/communication_dsoftbus/issues/IBI1JO?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】Disc_ble.c中RecvMessageDeinit未加锁处理，disc_manager.c中未做上限处理，存在安全风险 | 147| [IBHTM4](https://gitee.com/openharmony/kernel_liteos_a/issues/IBHTM4?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】CVE-879883602844717056 | 148| [IBFEJ7](https://gitee.com/openharmony/applications_app_samples/issues/IBFEJ7?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】发现引用了有问题的axios 1.6.2版本 | 149| [IBFEWO](https://gitee.com/openharmony/applications_app_samples/issues/IBFEWO?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】发现引用了有问题的body-parser版本1.20.1、1.20.2 | 150| [IBFF0F](https://gitee.com/openharmony/applications_app_samples/issues/IBFF0F?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】4.1 release 分支发现引用了有问题的braces(dev) 3.0.2版本 | 151| [IBGB67](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBGB67?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】CVE 同步 | 152| [IB8M92](https://gitee.com/openharmony/kernel_linux_5.10/issues/IB8M92?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-50256 | 153| [IB8L2B](https://gitee.com/openharmony/kernel_linux_5.10/issues/IB8L2B?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】linux kernel组件存在漏洞CVE-2024-38594 | 154| [IBE44O](https://gitee.com/openharmony/kernel_linux_5.10/issues/IBE44O?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】回合cve补丁 | 155| [IBERYF](https://gitee.com/openharmony/kernel_liteos_a/issues/IBERYF?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】 CVE-873354661225041920 | 156| [IBEB48](https://gitee.com/openharmony/kernel_liteos_a/issues/IBEB48?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】 CVE-872272903297568768 | 157| [IBDWNM](https://gitee.com/openharmony/kernel_liteos_a/issues/IBDWNM?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】 CVE-871586908591886336 | 158| [IBJESO](https://gitee.com/openharmony/third_party_openssl/issues/IBJESO?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】CVE-2024-13176 | 159| [IBFN54](https://gitee.com/openharmony-sig/chromium_src/issues/IBFN54?from=project-issue) | 【漏洞】 【OpenHarmony-4.1-Release】CVE-2023-6112 | 160 161## 遗留缺陷列表 162 163**表5** 遗留缺陷列表 164 165| ISSUE | 问题描述 | 影响 | 计划解决日期 | 166| :------- | :------- | :------- | :------- | 167| / | / | / | / | 168