Arch Linux

On the 16th of July, at around 8pm UTC+2, a malicious AUR package was uploaded to the AUR. Two other malicious packages were uploaded by the same user a few hours later. These packages were installing a script coming from the same GitHub repository that was identified as a Remote Access Trojan (RAT).

The affected malicious packages are:

• librewolf-fix-bin
• firefox-patch-bin
• zen-browser-patched-bin

The Arch Linux team addressed the issue as soon as they became aware of the situation. As of today, 18th of July, at around 6pm UTC+2, the offending packages have been deleted from the AUR.

We strongly encourage users that may have installed one of these packages to remove them from their system and to take the necessary measures in order to ensure they were not compromised.

According to the gamingonlinux discord, the following packages are also suspected to be compromised:

https://aur.archlinux.org/pkgbase/minecraft-cracked/

https://aur.archlinux.org/pkgbase/ttf-ms-fonts-all/

https://aur.archlinux.org/pkgbase/vesktop-bin-patched/

https://aur.archlinux.org/pkgbase/ttf-all-ms-fonts/

If you have any of these packages installed, immediately delete it and check your system processes for a process called systemd-initd (this is the RAT).

Here is an analysis of the malicious payload: https://www.virustotal.com/gui/file/d9f0df8da6d66aaae024bdca26a228481049595279595e96d5ec615392430d67

2025-06-21 - Jan Alexander Steffens

With 20250613.12fe085f-5, we split our firmware into several vendor-focused packages. linux-firmware is now an empty package depending on our default set of firmware.

Unfortunately, this coincided with upstream reorganizing the symlink layout of the NVIDIA firmware, resulting in a situation that Pacman cannot handle. When attempting to upgrade from 20250508.788aadc8-2 or earlier, you will see the following errors:

linux-firmware-nvidia: /usr/lib/firmware/nvidia/ad103 exists in filesystem
linux-firmware-nvidia: /usr/lib/firmware/nvidia/ad104 exists in filesystem
linux-firmware-nvidia: /usr/lib/firmware/nvidia/ad106 exists in filesystem
linux-firmware-nvidia: /usr/lib/firmware/nvidia/ad107 exists in filesystem

To progress with the system upgrade, first remove linux-firmware, then reinstall it as part of the upgrade:

# pacman -Rdd linux-firmware
# pacman -Syu linux-firmware

2025-06-16 - Peter Jung

We are transitioning the wine and wine-staging package to a pure wow64 build. This change removes the dependency on the multilib repository for wine and wine-staging.

The main reason for this is to align with upstream Wine development, which simplifies packaging and the dependency chain.

Potential Issues:

• OpenGL Performance: A known limitation of the new WoW64 mode is reduced performance for 32-bit applications that use OpenGL directly
• Breaking Changes: Existing 32-bit prefixes needs to be recreated

If you are facing issues with 32 bit prefixes, please recreate these and reinstall the application.

cross-posted from: https://lemmy.world/post/29327391

Valkey, a high-performance key/value datastore, will be replacing redis in the [extra] repository. This change is due to Redis modifying its license from BSD-3-Clause to RSALv2 and SSPLv1 on March 20th, 2024.

Arch Linux Package Maintainers intend to support the availability of the redis package for roughly 14 days from the day of this post, to enable a smooth transition to valkey. After the 14 day transition period has ended, the redis package will be moved to the AUR. Also, from this point forward, the redis package will not receive any additional updates and should be considered deprecated until it is removed.

Users are recommended to begin transitioning their use of Redis to Valkey as soon as possible to avoid possible complications after the 14 day transition window closes.

The maintainer updated it within a couple of hours.

Crazy story, I know.

I'm using Gnome as DE and was really happy with it until my last update. I would like to re-install Gnome, but want to remove before that all Gnome stuff, settings and dependencies. This is no problem for the packages installed via pacman and also it's dependencies. But I fear that I don't know how to remove all relevant settings. Is there some special folder or set of files to remove, before I can start from scratch?

Using Gnome, my Bluetooth mouse wasn't connecting anymore. Found some comments on Reddit saying downgrading the kernel solved the issue, it also worked for me.

cross-posted from: https://lemm.ee/post/35034629

I am having issues with Mangohud and Goverlay.

Upon opening Goverlay it gives a black box and has issues closing without forcing it shutdown.

https://ibb.co/pnzKZdd

OS: Arch Linux x86_64 Kernel: Linux 6.9.5-zen1-1-zen DE: KDE Plasma 6.0.5 WM: KWin (Wayland) CPU: 12th Gen Intel(R) Core(TM) i7-12700KF (20) @ 5.00 GHz GPU: NVIDIA GeForce RTX 3090 [Discrete] Memory: 4.09 GiB / 62.60 GiB (7%)

I have tried uninstalling both Goverlay and Mangohud

I have also removed .conf files from: ~/.config/MangoHud /usr/share/doc/mangohud

Is there more that I need to do to clean uninstall and reinstall?

Any help would be appreciated

Hello Admin, am I allowed to post in my first language or not? Thanks. First post, btw!

Welcome! Share all things arch here.