This project follows the Eclipse Foundation Vulnerability Reporting Policy:

• https://www.eclipse.org/security/

Please report vulnerabilities that are not yet publicly disclosed by email to the Eclipse Foundation Security Team at security@eclipse-foundation.org. Do NOT open a public GitHub issue for an undisclosed vulnerability.

This repository is a fork of the upstream libhybris project carrying the OpenHarmony adaptation: an OHOS GN build, the ohos EGL platform backend, and bring-up fixes for running bionic-based vendor HAL binaries under OHOS musl. Please report here only vulnerabilities in content authored by this project:

• Vulnerabilities in upstream OpenHarmony components (the eclipse-oniro-mirrors repositories) should be reported to the upstream OpenAtom OpenHarmony project.
• Vulnerabilities in the Linux kernel should be reported upstream (see https://docs.kernel.org/process/security-bugs.html).
• Vulnerabilities in third-party vendor binaries fetched at build time (e.g. Halium / vendor blobs) should be reported to their respective vendors.
• Vulnerabilities in upstream libhybris code should also be reported to the upstream project at https://github.com/libhybris/libhybris.

Only the most recent release branch (OpenHarmony-6.1-LTS) is supported with security updates. Older release branches are not maintained.