The arm64-ancient build uses debian bullseye, which has reached the end of security support.

This build should either be switched to the current debian LTS, or stop being made. Since it targeted kernel 4.19 for android phones that still used that, it may either not be necessary any more, or the new debian LTS may not work with that kernel.

It may be that, since termux now includes a git-annex package, it's not worth doing a build just for old android phones any longer. --Joey

If ca-certificates won't be updated for the EMudhra Intermediate CA Compromise, it would be best to either drop the build or release a new build that does not bundle any certs. --Joey

Temporarily dealt with that by manually removing the affected cert from the arm64ancient build chroot. --Joey

I made a remove-arm64ancient branch for this. Waiting to merge it until after one last security update release with the ca-certificates.

Update: And with that out of the way, I think waiting 1 more release makes sense, so documented that it is end of life but didn't remove yet. --Joey