All articles tagged with #arch linux
CachyOS released its June 2026 update for the Arch-based distro, adding performance optimizations such as extended Profile Guided Optimizations in the Python build and a new GCC patch, fixing an OpenBLAS regression, plus a new CachyOS Hyprland Noctalia desktop option and various UI and app improvements.
Amid a malware surge that compromised over 1,500 Arch Linux AUR packages, attackers started injecting Russian spam and offensive messages into AUR commits and post-install configuration, now affecting more than 70 packages across Python, Ruby, Llama.cpp and others, with AI/LLM bots helping to flag abuse.
A day after Arch Linux AUR’s initial malware incident, a second wave of more sophisticated, obfuscated malware hit user-supplied packages (including Node.js, Plasma 6 applets, Firefox, Aura browser, LibreWolf extensions, and a NeoVim plug‑in). Reported by a821 and later by Nicolas Boichat, the affected packages were addressed, but experts warn that AUR security safeguards may need strengthening or a temporary shutdown until verification improves.
Over 400 Arch User Repository packages were compromised after a spoofed maintainer injected malicious post-install steps that install a rogue npm package (atomic-lockfile) containing a Linux ELF with an eBPF rootkit and credential-stealing capabilities. The malware targets developer data and tokens across tools like Slack, Teams, Discord, GitHub, Vault, and SSH, and can exfiltrate data via HTTP. Researchers from IFIN and Sonatype describe two attack methods: hijacking orphaned PKGBUILD files to run npm post-install, and abusing a trusted maintainer identity to push malicious commits. Arch is removing the malicious commits and banning accounts; affected users should review indicators of compromise, rotate credentials, and consider reinstalling Arch if compromised.
A supply-chain attack hijacked more than 400 Arch Linux AUR packages by modifying their build scripts to install a Rust-based credential stealer that can also load an eBPF rootkit when run with root; the attackers targeted abandoned packages to exploit trust, persisted via systemd, and used Tor for C2, prompting users to audit builds, rotate credentials, and thoroughly clean systems rather than assuming safety from package managers.
A large-scale malware campaign targeted Arch Linux's AUR, compromising over 400 user-submitted packages. Arch maintainers are actively resetting and deleting the malicious content and banning affected accounts; officials say the impact is limited to AUR and does not affect Arch's official packages, with discussions on mailing lists and CachyOS forums detailing the incidents.
A publicly released PoC demonstrates PinTheft, a Linux local privilege escalation in the RDS zerocopy path that can yield root on Arch Linux by pinning user pages and stealing FOLL_PIN references through io_uring fixed buffers; exploitation requires the RDS module to be loaded (default on Arch among common distros), io_uring enabled, a readable SUID-root binary, and x86_64 support, which limits its practical attack surface. Users should patch with the latest kernel, and as a mitigation can unload the RDS modules and disable them via modprobe.d (install rds /bin/false and install rds_tcp /bin/false) until patches are deployed.
After switching his desktop to CachyOS (an Arch-based rolling release) in January, Nathan Edwards uses Linux as his main computer and has booted Windows only twice. The ride has been calmer and more robust than expected, with occasional hardware quirks (a webcam mic glitch, ethernet wake issues, a printer headache) that he fixes through Snapper snapshots, manual partition tweaks, and driver tweaks. He’s embraced open-source tools (Zen browser, Spotify launcher, ZMK Studio) and the Unix philosophy of modular software, while still keeping Windows on his laptop for work. He plans to keep Linux as his desktop daily driver going forward.
A 12.6x9.7-inch 3D-printed Playnix Console packs a full PC (Ryzen 5 5500, RX 9060 XT, 16GB RAM, 512GB) into a compact shell, runs Arch Linux with EmuDeck, and can upscale to 4K/60fps via AMD's FSR Redstone. Priced at $1,140, it's pitched as a glimpse of the future where consoles and PCs converge, with hints of hardware upgrades and OS features (Xbox Mode) shaping the next generation.
Manjaro Linux 26.0 has been released with package updates and new features, including KDE Plasma 6.5 and GNOME 49, but recommends the Xfce edition for users wanting to continue using X11 sessions due to potential support loss in the other desktop environments. The update also includes new drivers, kernels, and software versions, with ISOs expected soon.
NVIDIA has discontinued support for Pascal GPUs on Linux, causing issues for users on Arch Linux who face driver failures after updates. The workaround involves using a legacy driver from the AUR, maintained by CachyOS, but this can break Steam and requires additional hacks. The situation highlights challenges in supporting older hardware on Linux.
CachyOS, an Arch Linux-based distribution popular among gamers and enthusiasts, is developing a server edition aimed at NAS, workstations, and servers, featuring hardened configurations and performance optimizations, with plans to enhance compiler optimizations and provide easy deployment for hosting providers.
Arch Linux has dropped support for NVIDIA Pascal and older GPUs with the upgrade to driver version 590, focusing support on newer hardware while providing workarounds for older GPUs through community packages.
pearOS is a Romanian Linux distribution inspired by macOS, now rebuilt on Arch Linux with KDE Plasma 6.5.4, featuring a macOS-like interface and integrated Apple-style features, aiming to combine aesthetic appeal with Linux versatility.