RSS Parrot

Cleaning up old repositories

https://archlinux.org/news/cleaning-up-old-repositories/

Published: February 17, 2025 00:30

Around two years ago, we've merged the [community] repository into [extra] as part of the git migration. In order to not break user setups, we kept these repositories around in an unused and empty state. We're going to clean up these old repositories on…

Glibc 2.41 corrupting Discord installation

https://archlinux.org/news/glibc-241-corrupting-discord-installation/

Published: February 3, 2025 11:24

We plan to move glibc and its friends to stable later today, Feb 3. After installing the update, the Discord client will show a red warning that the installation is corrupt. This issue has been fixed in the Discord canary build. If you rely on audio…

Critical rsync security release 3.4.0

https://archlinux.org/news/critical-rsync-security-release-340/

Published: January 16, 2025 15:33

We'd like to raise awareness about the rsync security release version 3.4.0-1 as described in our advisory ASA-202501-1. An attacker only requires anonymous read access to a vulnerable rsync server, such as a public mirror, to execute arbitrary code on the…

Providing a license for package sources

https://archlinux.org/news/providing-a-license-for-package-sources/

Published: November 19, 2024 09:13

Arch Linux hasn't had a license for any package sources (such as PKGBUILD files) in the past, which is potentially problematic. Providing a license will preempt that uncertainty. In RFC 40 we agreed to change all package sources to be licensed under the…

Manual intervention for pacman 7.0.0 and local repositories required

https://archlinux.org/news/manual-intervention-for-pacman-700-and-local-repositories-required/

Published: September 14, 2024 11:40

With the release of version 7.0.0 pacman has added support for downloading packages as a separate user with dropped privileges. For users with local repos however this might imply that the download user does not have access to the files in question, which…

The sshd service needs to be restarted after upgrading to openssh-9.8p1

https://archlinux.org/news/the-sshd-service-needs-to-be-restarted-after-upgrading-to-openssh-98p1/

Published: July 1, 2024 16:40

After upgrading to openssh-9.8p1, the existing SSH daemon will be unable to accept new connections (see https://gitlab.archlinux.org/archlinux/packaging/packages/openssh/-/issues/5). When upgrading remote hosts, please make sure to restart the sshd service…

Arch Linux 2024 Leader Election Results

https://archlinux.org/news/arch-linux-2024-leader-election-results/

Published: April 15, 2024 06:56

Recently we held our leader election, and the previous Project Leader Levente "anthraxx" Polyák ran again while no other people were nominated for the role. As per our election rules he is re-elected for a new term. The role of of the project lead within…

Increasing the default vm.max_map_count value

https://archlinux.org/news/increasing-the-default-vmmax_map_count-value/

Published: April 7, 2024 18:12

The vm.max_map_count paramater will be increased from the default 65530 value to 1048576. This change should help address performance, crash or start-up issues for a number of memory intensive applications, particularly for (but not limited to) some…

The xz package has been backdoored

https://archlinux.org/news/the-xz-package-has-been-backdoored/

Published: March 29, 2024 18:55

TL;DR: Upgrade your systems and container images now! As many of you may have already read (one), the upstream release tarballs for xz in version 5.6.0 and 5.6.1 contain malicious code which adds a backdoor. This vulnerability is tracked in the Arch Linux…

mkinitcpio hook migration and early microcode

https://archlinux.org/news/mkinitcpio-hook-migration-and-early-microcode/

Published: March 4, 2024 17:14

With the release of mkinitcpio v38, several hooks previously provided by Arch packages have been moved to the mkinitcpio upstream project. The hooks are: systemd, udev, encrypt, sd-encrypt, lvm2 and mdadm_udev. To ensure no breakage of users' setup occurs,…