[NOTICE] 2022-02-15 Termux Apps Vulnerability Disclosures

[agnostic-apollo]

This is a vulnerability report for termux-app, termux-tasker and termux-widget being released on 2022-02-15. Users are advised to immediately update to Termux v0.118.0, Termux:Tasker v0.5 and Termux:Widget v0.13.0 if they are using any older version.

All private files like security keys for ssh or encryption keys should be assumed to be compromised for users who were using termux app version <= v0.117 . It is highly advisable to replace any such keys with new ones and look into any suspicious authorized access on any remote servers being connected to from termux.

People who are still using Google Playstore version are advised to immediately shift to F-Droid or Github releases since updates will not be released on Google Playstore any time soon, if ever, due to Android 10 issues. Playstore builds were deprecated more than ~150 days ago and are no longer supported. Check https://github.com/termux/termux-app#installation for more info on where to install/update the Termux app.

https://termux.github.io/general/2022/02/15/termux-apps-vulnerability-disclosures.html