ThothTerm Resolute 0.3.2

ThothTerm Resolute 0.3.2

Security and stabilization release for com.thothterm.ubuntu (versionCode 302). Update recommended for every earlier version.

• Renamed: ThothTerm Ubuntu is now ThothTerm Resolute. Same app, package id and data (installs update in place); renamed because Ubuntu is Canonical's trademark. It still runs Ubuntu 26.04 LTS. Not affiliated with or endorsed by Canonical.
• Security: an exported legacy integration accepted untrusted input from other installed apps. It is removed; the app now exports only its launcher, and nothing from outside the app can be typed into a terminal session. Permanent tests check the exported components of every built APK. Versions up to and including 0.3.1 are affected. Details stay in the private advisory for now.
• Setup names both downloads before anything is fetched: the base system, then sudo and package lists from archive.ubuntu.com and security.ubuntu.com.
• A timed-out or interrupted background setup step is really stopped (SIGKILL; Android's destroyForcibly() only sends SIGTERM, which PRoot survived).
• Store icon and per-app store metadata in term-ubuntu/fastlane; native libraries build byte for byte the same on any machine.

Built from commit 760d54e (JDK 21, Android SDK 36, NDK 23.2.8568313). *-release-unsigned.apk are the R8 release builds for F-Droid/own signing; *-test.apk are the same builds signed with the public Android debug key for testing only. Hashes: SHA256SUMS.txt.

Checked: 1275 unit tests, 0 failures; Android lint on the F-Droid release build, 0 errors; release APK checks (identity, 16 KB alignment, ELF, JNI, rootfs, exported components) pass. On a Samsung SM-A165F (Android 16, kernel 6.12.38, isolated test build): no external entry point can start the terminal, an in-place update keeps /home, and a hung optional-setup step times out, leaves no process behind and can be retried from the menu. Not tested: kernel 4.14 devices (PRoot child tracking, see 0.3.1), other ABIs.