- Security-bulletin - lists.openatom.io

2026年08月安全公告
by 王晨 04 Aug '26

04 Aug '26

发布于2026.08.04 备注：OpenHarmony-5.0.3-Release分支当前已停止维护，后续这个分支的安全漏洞也不再维护，详情参见社区公告。 OpenHarmony-5.0.3-Release分支停止维护公告 CVE漏洞描述漏洞影响严重程度CVSS3.1基础得分受影响的版本受影响的仓库修复链接 CVE-2026-50001communication_bluetooth 权限绕过漏洞本地攻击者可造成DOS低危3.3OpenHarmony-v6.1-Releasecommunication_bluetooth6.1.x CVE-2026-41955web_webview 越界读漏洞远程攻击者可造成DOS中危6.5OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Releaseweb_webview6.0.x 5.1.0.x CVE-2026-50049arkcompiler_ets_runtime 越界写漏洞本地攻击者可造成任意代码执行中危5.5OpenHarmony-v6.0-Releasearkcompiler_ets_runtime6.0.x CVE-2026-21395arkui_ace_engine 越界写漏洞本地攻击者可造成任意代码执行中危5.5OpenHarmony-v5.1.0-Releasearkui_ace_engine5.1.0.x CVE-2026-49031kernel_liteos_a 越界写漏洞本地攻击者可造成任意代码执行高危7.8OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.x CVE-2026-50051kernel_liteos_a 越界写漏洞本地攻击者可造成DOS低危3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.x CVE-2026-40625kernel_liteos_m 空指针解引用漏洞本地攻击者可造成任意代码执行中危6.0OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_m6.0.x 5.1.0.x 6.1.x CVE-2026-57888kernel_liteos_a 越界写漏洞本地攻击者可造成任意代码执行中危5.5OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.x CVE-2026-59777kernel_liteos_a 不当输入验证漏洞本地攻击者可造成DOS低危3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.x CVE-2026-58516kernel_liteos_a 不当输入验证漏洞本地攻击者可造成任意代码执行高危7.1OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.x CVE-2026-56753kernel_liteos_a 不当输入验证漏洞本地攻击者可造成DOS低危1.9OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.x CVE-2026-59760multimedia_av_codec 不当输入验证漏洞本地攻击者可造成信息泄露中危4.3OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasemultimedia_av_codec6.0.x 6.1.x CVE-2026-55989multimedia_audio_framework 空指针解引用漏洞本地攻击者可造成DOS低危3.3OpenHarmony-v6.1-Releasemultimedia_audio_framework6.1.x CVE-2026-56656base_location 敏感信息泄露漏洞本地攻击者可造成信息泄露低危3.3OpenHarmony-v6.1-Releasebase_location6.1.x CVE-2026-58313bundlemanager_app_domain_verify UAF漏洞本地攻击者可造成任意代码执行高危7.8OpenHarmony-v6.1-Releasebundlemanager_app_domain_verify6.1.x 以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2026-40200高危8.1third_party_muslOpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2025-71077无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2025-68742无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2025-68282无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2025-62408中危5.9third_party_caresOpenHarmony-v6.1-Release6.1.x CVE-2025-40164无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2025-21691无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2025-21665中危5.5kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-58078中危5.5kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-57951无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-57930无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-53206无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-45002中危5.5kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-40908无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-38620无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x CVE-2024-23848中危5.5kernel_linux_6.6OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 6.1.xhttps://gitcode.com/openharmony/startup_init/pull/4767 6.0.xhttps://gitcode.com/openharmony/startup_init/pull/4766 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4765

1 0

2026年07月安全公告
by 王晨 07 Jul '26

07 Jul '26

发布于2026.07.07 备注：OpenHarmony-5.0.3-Release分支当前已停止维护，后续这个分支的安全漏洞也不再维护，详情参见社区公告。 OpenHarmony-5.0.3-Release分支停止维护公告 CVE漏洞描述漏洞影响CVSS3.1基础得分受影响的版本受影响的仓库修复链接 CVE-2026-35497filemanagement_storage_service 敏感信息保存不当漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Releasefilemanagement_storage_service6.0.x 5.1.0.x CVE-2026-49029drivers_hdf_core 数组越界访问漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v6.0-Releasedrivers_hdf_core6.0.x CVE-2026-49032communication_netmanager_base 不当输入验证漏洞本地攻击者可造成DOS3.3OpenHarmony-v6.0-Releasecommunication_netmanager_base6.0.x CVE-2026-44610kernel_liteos_a 敏感信息保存不当漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X CVE-2026-44384kernel_liteos_a 敏感信息保存不当漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X CVE-2026-42939kernel_liteos_a 越界读漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X CVE-2026-42921kernel_liteos_a 越界读漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X CVE-2026-46577kernel_liteos_a 越界读漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X CVE-2026-42068kernel_liteos_a 越界读漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X CVE-2026-42957kernel_liteos_a 越界写漏洞本地攻击者可造成任意代码执行6.0OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Releas OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X CVE-2026-50004base_location 不当输入验证漏洞本地攻击者可造成DOS3.3OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasebase_location6.0.x 6.1.X CVE-2026-44391base_location 不当输入验证漏洞本地攻击者可造成DOS3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Releasebase_location6.0.x 5.1.0.x CVE-2026-49037base_location 不当输入验证漏洞本地攻击者可造成DOS3.3OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasebase_location6.0.x 6.1.X CVE-2026-27789kernel_liteos_a 条件竞争漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X CVE-2026-33087kernel_liteos_a 条件竞争漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X CVE-2026-33561kernel_liteos_a 条件竞争漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X CVE-2026-35059kernel_liteos_a 条件竞争漏洞本地攻击者可造成信息泄露3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Releasekernel_liteos_a6.0.x 5.1.0.x 6.1.X 以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2026-25210中危6.9third_party_skiaOpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.X CVE-2026-24515低危2.5third_party_skiaOpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.X CVE-2026-6732中危6.5third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 5.1.0.x 6.1.X CVE-2026-34757中危5.1third_party_libpngOpenHarmony-v6.0-Release OpenHarmony-v6.1-Release6.0.x 6.1.X CVE-2025-8291中危4.3third_party_pythonOpenHarmony-v6.0-Release6.0.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 6.1.xhttps://gitcode.com/openharmony/startup_init/pull/4767 6.0.xhttps://gitcode.com/openharmony/startup_init/pull/4766 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4765

1 0

2026年06月安全公告
by 王晨 02 Jun '26

02 Jun '26

发布于2026.06.02 备注：OpenHarmony 5.0阶段各分支中当前主要对OpenHarmony-5.0.3-Release分支进行安全漏洞维护。 CVE漏洞描述漏洞影响CVSS3.1基础得分受影响的版本受影响的仓库修复链接 CVE-2026-28206update_sys_installer条件竞争漏洞本地攻击者可造成任意代码执行5.5OpenHarmony-v6.0-Releaseupdate_sys_installer6.0.x CVE-2026-32668update_sys_installer UAF漏洞本地攻击者可造成任意代码执行5.5OpenHarmony-v6.0-Releaseupdate_sys_installer6.0.x 以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2026-6314高危8.3third_party_chromiumOpenHarmony-v6.0-Release6.0.x CVE-2026-6298中危4.3third_party_chromiumOpenHarmony-v6.0-Release6.0.x CVE-2026-31790无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2026-31789无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2026-28390无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2026-28389无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2026-28388无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2026-28387无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2025-57052致命9.8third_party_cJSONOpenHarmony-v5.0.3-Release OpenHarmony-v5.1.0-Release5.1.0.x 5.0.3.x CVE-2025-27363高危8.1third_party_freetypeOpenHarmony-v5.0.3-Release OpenHarmony-v5.1.0-Release5.1.0.x 5.0.3.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 6.0.xhttps://gitcode.com/openharmony/startup_init/pull/4603 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4600 5.0.3.xhttps://gitcode.com/openharmony/startup_init/pull/4602

1 0

2026年05月安全公告
by 王晨 07 May '26

07 May '26

发布于2026.05.07 备注：OpenHarmony 5.0阶段各分支中当前主要对OpenHarmony-5.0.3-Release分支进行安全漏洞维护。 CVE漏洞描述漏洞影响CVSS3.1基础得分受影响的版本受影响的仓库修复链接 CVE-2026-25850filemanagement_storage_service 不正确的权限管控漏洞本地攻击者可造成敏感信息泄露5.5OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Releasefilemanagement_storage_service6.0.x 5.1.0.x CVE-2026-27766multimedia_audio_framework 条件竞争漏洞本地攻击者可造成敏感信息泄露5.5OpenHarmony-v6.0-Releasemultimedia_audio_framework6.0.x CVE-2026-28733filemanagement_storage_service UAF漏洞本地攻击者可造成任意代码执行6.5OpenHarmony-v5.1.0-Releasefilemanagement_storage_service5.1.0.x CVE-2026-25781kernel_liteos_a 越界写漏洞本地攻击者可造成DOS，并无法恢复8.4OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Releasekernel_liteos_a6.0.x 5.1.0.x CVE-2026-33565kernel_linux_common_modules 条件竞争漏洞本地攻击者可造成DOS3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Releasekernel_linux_common_modules6.0.x 5.1.0.x 以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2026-25646中危6.3third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2026-22693中危5.3third_party_harfbuzzOpenHarmony-v6.0-Release6.0.x CVE-2026-1757中危6.2third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2026-0992低危2.9third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2026-0990中危5.9third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2026-0989低危3.7third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-9230高危7.5third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-8194高危7.5third_party_pythonOpenHarmony-v6.0-Release6.0.x CVE-2025-28164无尚未提供third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2025-28162无尚未提供third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2026-4675高危8.8third_party_chromiumOpenHarmony-v6.0-Release6.0.x CVE-2026-3909高危8.8third_party_chromiumOpenHarmony-v6.0-Release6.0.x CVE-2026-3784中危5.3third_party_curlOpenHarmony-v6.0-Release6.0.x CVE-2026-3713中危5.3third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2026-3783无尚未提供third_party_curlOpenHarmony-v6.0-Release6.0.x CVE-2026-3538高危8.8third_party_chromiumOpenHarmony-v6.0-Release6.0.x CVE-2026-33636高危7.6third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2026-33416中危6.3third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2026-27135高危7.5third_party_nghttp2OpenHarmony-v6.0-Release6.0.x CVE-2026-23865中危5.3third_party_freetypeOpenHarmony-v6.0-Release6.0.x CVE-2026-22796无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2026-22795无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2026-1965中危6.5third_party_curlOpenHarmony-v6.0-Release6.0.x CVE-2025-8732低危3.3third_party_libxml2OpenHarmony-v6.0-Release6.0.x CVE-2025-8576无尚未提供third_party_chromiumOpenHarmony-v6.0-Release6.0.x CVE-2025-69421无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-69420无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-69419无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-69418无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-68160无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-6558高危8.8third_party_chromiumOpenHarmony-v6.0-Release6.0.x CVE-2025-6170低危2.5third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release5.1.0.x 5.0.3.x CVE-2025-57812低危3.7third_party_cups-filtersOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2025-57812低危3.7third_party_cups-filtersOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2025-5281中危5.4third_party_chromiumOpenHarmony-v6.0-Release6.0.x CVE-2025-5068高危8.8third_party_chromiumOpenHarmony-v5.1.0-Release5.1.0.x CVE-2025-5064中危5.4third_party_chromiumOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2025-5063高危8.8third_party_chromiumOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2025-49794中危6.3third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release5.1.0.x 5.0.3.x CVE-2025-4664中危4.3third_party_chromiumOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2025-3620高危8.8third_party_chromiumOpenHarmony-v5.1.0-Release5.1.0.x CVE-2025-32414中危5.6third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release5.1.0.x 5.0.3.x CVE-2025-15467无尚未提供third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-14819无尚未提供third_party_curlOpenHarmony-v6.0-Release6.0.x CVE-2025-14524无尚未提供third_party_curlOpenHarmony-v6.0-Release6.0.x CVE-2025-0762高危8.8third_party_chromiumOpenHarmony-v5.1.0-Release5.1.0.x CVE-2024-8636高危8.8third_party_chromiumOpenHarmony-v5.1.0-Release5.1.0.x CVE-2024-56171高危7.8third_party_libxml2OpenHarmony-v5.0.3-Release5.0.3.x CVE-2023-52890中危4.6third_party_ntfs-3gOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 6.0.xhttps://gitcode.com/openharmony/startup_init/pull/4515 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4357 5.0.3.xhttps://gitcode.com/openharmony/startup_init/pull/4514

1 0

2026年04月安全公告
by 王晨 07 Apr '26

07 Apr '26

发布于2026.04.07 备注：OpenHarmony 5.0阶段各分支中当前主要对OpenHarmony-5.0.3-Release分支进行安全漏洞维护。 CVE漏洞描述漏洞影响CVSS3.1基础得分受影响的版本受影响的仓库修复链接 CVE-2026-24792web_webview条件竞争漏洞远程攻击者可造成任意代码执行8.1OpenHarmony-v6.0-Releaseweb_webview6.0.x CVE-2026-27648web_webview越界写漏洞远程攻击者可造成任意代码执行8.8OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Releaseweb_webview6.0.x 5.1.0.x 5.0.3.x CVE-2026-27781kernel_liteos_a整数溢出漏洞本地攻击者可造成DOS3.3OpenHarmony-v5.0.3-Release OpenHarmony-v5.1.0-Releasekernel_liteos_a5.1.0.x 5.0.3.x CVE-2026-28751filemanagement_storage_service输入校验漏洞本地攻击者可造成DOS3.3OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Releasefilemanagement_storage_service6.0.x 5.1.0.x 5.0.3.x CVE-2026-25110Sensors_medical_sensor空指针解引用漏洞本地攻击者可造成DOS3.3OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-ReleaseSensors_medical_sensor6.0.x 5.0.3.x 以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2026-25646中危6.3third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2026-22693中危5.3third_party_harfbuzzOpenHarmony-v6.0-Release6.0.x CVE-2026-1757中危6.2third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2026-0992低危2.9third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2026-0990中危5.9third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2026-0989低危3.7third_party_libxml2OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-9230高危7.5third_party_opensslOpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-8194高危7.5third_party_pythonOpenHarmony-v6.0-Release6.0.x CVE-2025-28164无尚未提供third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2025-28162无尚未提供third_party_libpngOpenHarmony-v6.0-Release6.0.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 6.0.xhttps://gitcode.com/openharmony/startup_init/pull/4492 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4470 5.0.3.xhttps://gitcode.com/openharmony/startup_init/pull/4493

1 0

2026年03月安全公告
by 王晨 03 Mar '26

03 Mar '26

发布于2026.03.03 备注：OpenHarmony 5.0阶段各分支中当前主要对OpenHarmony-5.0.3-Release分支进行安全漏洞维护。以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2026-22801中危6.8third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2026-22695中危6.1third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2025-66293高危7.1third_party_libpngOpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release6.0.x 5.1.0.x CVE-2025-65018无尚未提供third_party_libpngOpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release6.0.x 5.1.0.x CVE-2025-64720无尚未提供third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2025-64505无尚未提供third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2025-39902无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-39756无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-12726中危6.3third_party_chromiumOpenHarmony-v6.0-Release6.0.x CVE-2025-10200高危8.8third_party_chromiumOpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x CVE-2022-50266无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 6.0.xhttps://gitcode.com/openharmony/startup_init/pull/4432 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4434 5.0.3.xhttps://gitcode.com/openharmony/startup_init/pull/4431

1 0

2026年02月安全公告
by 王晨 06 Feb '26

06 Feb '26

发布于2026.02.06 备注：OpenHarmony 5.0阶段各分支中当前主要对OpenHarmony-5.0.3-Release分支进行安全漏洞维护。 CVE漏洞描述漏洞影响CVSS3.1基础得分受影响的版本受影响的仓库修复链接 CVE-2026-0639LiteOS_a内存泄露漏洞本地攻击者可造成DOS3.3OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Releasekernel_liteos_a6.0.x 5.1.0.x 5.0.3.x 以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2025-68340无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-68337无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-68336无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-68312无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-68286无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-68264无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-68261无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-68241无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-64506无尚未提供third_party_libpngOpenHarmony-v6.0-Release6.0.x CVE-2025-40319无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40308无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40307无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40248无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40220无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40215无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40173无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40109无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2024-35886高危7.8kernel_linux_5.10OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2024-35821中危5.5kernel_linux_5.10OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2024-26935中危5.5kernel_linux_5.10OpenHarmony-v5.1.0-Release OpenHarmony-v6.0-Release6.0.x 5.1.0.x CVE-2023-53846无尚未提供kernel_linux_5.10OpenHarmony-5.1.0-Release OpenHarmony-6.0-Release OpenHarmony-5.0.3-Release6.0.x 5.1.0.x 5.0.3.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 6.0.xhttps://gitcode.com/openharmony/startup_init/pull/4360 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4357 5.0.3.xhttps://gitcode.com/openharmony/startup_init/pull/4359

1 0

2026年01月安全公告
by 王晨 06 Jan '26

06 Jan '26

发布于2026.01.06 备注：OpenHarmony 5.0阶段各分支中当前主要对OpenHarmony-5.0.3-Release分支进行安全漏洞维护。以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2025-40105无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40102无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40077无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40064无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40054无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40049无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40035无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40021无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-40016无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-39946无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release6.0.x CVE-2025-39914无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release6.0.x CVE-2025-39806无尚未提供kernel_linux_6.6OpenHarmony-v6.0-Release6.0.x CVE-2025-39782无尚未提供kernel_linux_5.10OpenHarmony-v5.0.3-Release5.0.3.x CVE-2025-39749无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-39702无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2024-47674中危5.7kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release6.0.x 5.1.0.x CVE-2024-38594中危5.5kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release6.0.x 5.1.0.x CVE-2023-53673无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2023-53596无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2023-53594无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2023-53520无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2023-53491无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2023-53482无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2022-49054无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 6.0.xhttps://gitcode.com/openharmony/startup_init/pull/4306 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4315 5.0.3.xhttps://gitcode.com/openharmony/startup_init/pull/4305

1 0

2025年12月安全公告
by 王晨 02 Dec '25

02 Dec '25

发布于2025.12.02 备注：OpenHarmony 5.0阶段各分支中当前主要对OpenHarmony-5.0.3-Release分支进行安全漏洞维护。 CVE漏洞描述漏洞影响严重程度CVSS 3.1得分受影响的版本受影响的仓库修复链接 CVE-2025-12736multimedia_audio_standard 信息泄露漏洞特定场景下, 本地攻击者可造成信息泄露中危6.5OpenHarmony-v5.0.3-Releasemultimedia_audio_standard5.0.3.x 以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2025-39994无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-39931无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-39913无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-39905无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-39760无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.0.3.x CVE-2025-39730无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.0.3.x CVE-2025-39724无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-39689无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.0.3.x CVE-2025-39683无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-38732无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2025-38702无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.0.3.x CVE-2025-38694无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.0.3.x CVE-2025-38680无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.0.3.x CVE-2023-53588无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2023-53577无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2023-53450无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2023-53221无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2022-50552无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x CVE-2022-50445无尚未提供kernel_linux_5.10OpenHarmony-v6.0-Release OpenHarmony-v5.1.0-Release OpenHarmony-v5.0.3-Release6.0.x 5.1.0.x 5.0.3.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 6.0.xhttps://gitcode.com/openharmony/startup_init/pull/4262 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4261 5.0.3.xhttps://gitcode.com/openharmony/startup_init/pull/4263

1 0

2025年11月安全公告
by 王晨 04 Nov '25

04 Nov '25

发布于2025.11.04 备注：OpenHarmony 5.0阶段各分支中当前主要对OpenHarmony-5.0.3-Release分支进行安全漏洞维护。 CVE漏洞描述漏洞影响严重程度CVSS 3.1得分受影响的版本受影响的仓库修复链接 CVE-2025-25277arkcompiler_ets_runtime类型混淆漏洞特定场景下, 本地攻击者可造成任意代码执行中危6.3OpenHarmony-v5.0.3-Release OpenHarmony-v5.1.0-Releasearkcompiler_ets_runtime5.1.0 5.0.3 以下为三方库漏洞，只提供CVE、严重程度、受影响的OpenHarmony版本，详细信息请参考三方公告。 CVE严重程度CVSS 3.1得分受影响的仓库受影响的OpenHarmony版本修复链接 CVE-2025-38692无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38677低危3.5kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38668中危5.7kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38652低危3.5kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38635中危5.7kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38626中危4.6kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38622中危4.8kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38617低危2.6kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38588无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38587无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38578无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38577无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38565无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38555无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38512无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38499无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-38342无尚未提供kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x CVE-2025-27809中危5.4third_party_mbedtlsOpenHarmony-v5.0.3-Release5.0.3.x CVE-2024-58239低危3.5kernel_linux_5.10OpenHarmony-5.0.3-Release5.0.3.x 以下是各维护版本的安全补丁标签，请在合入当月及之前全部对应安全补丁之后，更新安全补丁标签。对应维护版本安全补丁修改方式参考链接 5.1.0.xhttps://gitcode.com/openharmony/startup_init/pull/4151 5.0.3.xhttps://gitcode.com/openharmony/startup_init/pull/4223

1 0