751
Unofficial channel to receive news about ArchLinux.
📨 Mkinitcpio >=42 requires manual intervention for TPM2-based unlocking of LUKS devices
Starting with package version 42-1, the mkinitcpio systemd hook now includes systemd-pcrosseparator.service (as intended by systemd v261). This affects the measurements of PCR values 0-7, 9 and 12-14. If you configured the systemd hook and...
🗞 Read more
📨 Active AUR malicious packages incident
We are currently experiencing a high volume of malicious package adoptions and updates in the Arch User Repository. We are actively working to track down existing malicious commits and attempting to prevent additional malicious commits from...
🗞 Read more
📨 Breaking changes for all users of `varnish`, which is renamed to `vinyl-cache`
The Varnish project has renamed itself to Vinyl Cache. We followed this rename with a new vinyl-cache package. This upgrade results in breaking changes and users are advised to study these changes and how it affects them before following...
🗞 Read more
📨 iptables now defaults to the nft backend
The old iptables-nft package name is replaced by iptables, and the legacy backend is available as iptables-legacy. When switching packages (among iptables-nft, iptables, iptables-legacy), check for .pacsave files in /etc/iptables/ and...
🗞 Read more
📨 .NET packages may require manual intervention
The following packages may require manual intervention due to the upgrade from 9.0 to 10.0: aspnet-runtime aspnet-targeting-pack dotnet-runtime dotnet-sdk dotnet-source-built-artifacts dotnet-targeting-pack pacman may display the following...
🗞 Read more
📨 dovecot >= 2.4 requires manual intervention
The dovecot 2.4 release branch has made breaking changes which result in it being incompatible with any <= 2.3 configuration file. Thus, the dovecot service will no longer be able to start until the configuration file was migrated,...
🗞 Read more
📨 zabbix >= 7.4.1-2 may require manual intervention
Starting with 7.4.1-2, the following Zabbix system user accounts (previously shipped by their related packages) will no longer be used. Instead, all Zabbix components will now rely on a shared zabbix user account (as originally intended by...
🗞 Read more
📨 linux-firmware >= 20250613.12fe085f-5 upgrade requires manual intervention
With 20250613.12fe085f-5, we split our firmware into several vendor-focused packages. linux-firmware is now an empty package depending on our default set of firmware. Unfortunately, this coincided with upstream reorganizing the symlink...
🗞 Read more
📨 Transition to the new WoW64 wine and wine-staging
We are transitioning the wine and wine-staging package to a pure wow64 build. This change removes the dependency on the multilib repository for wine and wine-staging. The main reason for this is to align with upstream Wine development,...
🗞 Read more
📨 Cleaning up old repositories
Around two years ago, we've merged the [community] repository into [extra] as part of the git migration. In order to not break user setups, we kept these repositories around in an unused and empty state. We're going to clean up these old...
🗞 Read more
📨 Critical rsync security release 3.4.0
We'd like to raise awareness about the rsync security release version 3.4.0-1 as described in our advisory ASA-202501-1. An attacker only requires anonymous read access to a vulnerable rsync server, such as a public mirror, to execute...
🗞 Read more
📨 Manual intervention for pacman 7.0.0 and local repositories required
With the release of version 7.0.0 pacman has added support for downloading packages as a separate user with dropped privileges. For users with local repos however this might imply that the download user does not have access to the files in...
🗞 Read more
📨 Arch Linux 2024 Leader Election Results
Recently we held our leader election, and the previous Project Leader Levente "anthraxx" Polyák ran again while no other people were nominated for the role. As per our election rules he is re-elected for a new term. The role of of the...
🗞 Read more
📨 The xz package has been backdoored
TL;DR: Upgrade your systems and container images now! As many of you may have already read (one), the upstream release tarballs for xz in version 5.6.0 and 5.6.1 contain malicious code which adds a backdoor. This vulnerability is tracked in...
🗞 Read more
❗️Hello everyone, I'm sorry for being away for a while, but I've been very busy... I'm happy to announce that the bot is up and running again. I've rebuilt it from scratch to ensure its reliability. I hope you'll enjoy using it. Thank you for your patience.
It should send a news soon...
📨 virtualbox-ext-vnc >= 7.2.12-2 requires manual intervention
Previously, we installed its contents in a way that made pacman not aware of the files (using VBoxManage extpack install ... from an install script). To mitigate issues during upgrade, you can use one of the following methods: Uninstall...
🗞 Read more
📨 Arch Linux 2026 Leader Election Results
Recently we held our leader elections and after a lively discussion period on the (internal) mailing lists and voting phase with two candidates Levente "anthraxx" Polyák was re-elected as Arch Linux Project Lead. As per our election rules...
🗞 Read more
📨 kea >= 1:3.0.3-6 update requires manual intervention
The kea package has moved all services to run as a dedicated kea user (instead of root) for improved security. This change requires permission updates to the runtime files created by the kea services. Users upgrading from an existing kea...
🗞 Read more
📨 NVIDIA 590 driver drops Pascal and lower support; main packages switch to Open Kernel Modules
With the update to driver version 590, the NVIDIA driver no longer supports Pascal (GTX 10xx) GPUs or older. We will replace the nvidia package with nvidia-open, nvidia-dkms with nvidia-open-dkms, and nvidia-lts with nvidia-lts-open....
🗞 Read more
📨 waydroid >= 1.5.4-3 update may require manual intervention
The waydroid package prior to version 1.5.4-2 (including aur/waydroid) creates Python byte-code files (.pyc) at runtime which were untracked by pacman. This issue has been fixed in 1.5.4-3, where byte-compiling these files is now done...
🗞 Read more
📨 Recent service outages
We want to provide an update on the recent service outages affecting our infrastructure. The Arch Linux Project is currently experiencing an ongoing denial of service attack that primarily impacts our main webpage, the Arch User Repository...
🗞 Read more
📨 Plasma 6.4.0 will need manual intervention if you are on X11
On Plasma 6.4 the wayland session will be the only one installed when the users does not manually specify kwin-x11. With the recent split of kwin into kwin-wayland and kwin-x11, users running the old X11 session needs to manually install...
🗞 Read more
📨 Valkey to replace Redis in the [extra] Repository
Valkey, a high-performance key/value datastore, will be replacing redis in the [extra] repository. This change is due to Redis modifying its license from BSD-3-Clause to RSALv2 and SSPLv1 on March 20th, 2024. Arch Linux Package Maintainers...
🗞 Read more
📨 Glibc 2.41 corrupting Discord installation
We plan to move glibc and its friends to stable later today, Feb 3. After installing the update, the Discord client will show a red warning that the installation is corrupt. This issue has been fixed in the Discord canary build. If you rely...
🗞 Read more
📨 Providing a license for package sources
Arch Linux hasn't had a license for any package sources (such as PKGBUILD files) in the past, which is potentially problematic. Providing a license will preempt that uncertainty. In RFC 40 we agreed to change all package sources to be...
🗞 Read more
📨 The sshd service needs to be restarted after upgrading to openssh-9.8p1
After upgrading to openssh-9.8p1, the existing SSH daemon will be unable to accept new connections (see https://gitlab.archlinux.org/archlinux/packaging/packages/openssh/-/issues/5). When upgrading remote hosts, please make sure to restart...
🗞 Read more
📨 Increasing the default vm.max_map_count value
The vm.max_map_count paramater will be increased from the default 65530 value to 1048576. This change should help address performance, crash or start-up issues for a number of memory intensive applications, particularly for (but not limited...
🗞 Read more
📨 mkinitcpio hook migration and early microcode
With the release of mkinitcpio v38, several hooks previously provided by Arch packages have been moved to the mkinitcpio upstream project. The hooks are: systemd, udev, encrypt, sd-encrypt, lvm2 and mdadm_udev. To ensure no breakage of...
🗞 Read more
🔄 TeX Live package reorganization
Starting from version 2023.66594-9, TeX Live packages have been reorganized to mirror upstream collections. Even though the new texlive-basic replaces... Read more