[Testing Update] 2026-05-29 - Systemd, COSMIC, NVIDIA, Firefox, Pipewire, VLC

Announcements Testing Updates
1

Hello Manjaro user community, here we have another set of package updates. We are continuing our development of the upcoming release of ‘Bian-May’ which can be expected end of June, beginning of July. Development speed may be a little slower the upcoming weeks. However, still let us know any issues you may found thus far.

Current Promotions

Recent News

New in Manjaro GNOME!

When choosing an accent color in Settings, the folder colors will now change automatically to match when using the Papirus Dark or Papirus Light icon theme.

To try it out, install gnome-shell-extension-papirus-folders-colorizer from Add/Remove Software, logout / login and enable Papirus Folder Colorizer from Extensions.

Or, if you prefer the command line:

Install:

sudo pacman -Syu gnome-shell-extension-papirus-folders-colorizer

Enable the extension:

 gnome-extensions enable papirus-folders-colorizer@NiffirgkcaJ.github.com

Logout:

gnome-session-quit --logout

Also, when applying accent colors from Layout Switcher settings, it will also set the matching folder color. Requires accent-color-change r172.c761c84-2 or newer.

KDE Plasma users with SDDM can now migrate to Plasma Login Manager

After ensuring plasma-login-manager 6.5.90-1 (or newer) is installed, run the following:

sudo pacman -Syu plasma-login-manager
systemctl disable sddm
systemctl enable plasmalogin
sudo pacman -R sddm-kcm sddm
NVIDIA 590 driver drops Pascal support

With the update to driver version 590, the NVIDIA driver no longer supports Pascal (GTX 10xx) GPUs or older.

Impact: Updating the NVIDIA packages on systems with Pascal, Maxwell, or older cards will fail to load the driver, which may result in a broken graphical environment.

Intervention required for Pascal/older users: Users with GTX 10xx series and older cards must switch to a legacy driver to maintain support:

  • Install the official linuxXXX-nvidia-575xx, linuxXXX-nvidia-570xx, or related DKMS packages.
  • Manjaro 26.1 Bian-May - Preview released
  • Manjaro 26.0 Anh-Linh released
  • Manjaro Summit public Alpha now available
  • As of Linux 5.4.302, the 5.4 series is now EOL (End Of Life). Please install 5.10 LTS (Long Term Support) or 5.15 LTS.
  • As of Linux 6.16.12, the 6.16 series is now EOL (End Of Life). Please install 6.18 LTS (Long Term Support) and/or 6.12 LTS.
  • As of Linux 6.17.13, the 6.17 series is now EOL (End Of Life). Please install 6.18 LTS (Long Term Support) and/or 6.12 LTS.
  • As of Linux 6.19.14, the 6.19 series is now EOL (End Of Life). Please install 7.0, and/or 6.18 LTS (Long Term Support) and/or 6.12 LTS.
Previous News

Notable Package Updates

Additional Info

Python 3.14 info

:information_source: You will need to rebuild any AUR Python packages that install files to site-packages or link to libpython3.13.so.

Print a list of of packages that have files in /usr/lib/python3.13/ :

pacman -Qoq /usr/lib/python3.13/

Rebuild them all at once:*

pamac build $(pacman -Qoq /usr/lib/python3.13)

Use rebuild-detector to see if anything else needs to be rebuilt:

 checkrebuild

* It’s recommended to clean your build cache first with pamac clean --build-files

Info about AUR packages

:warning: AUR (Arch User Repository) packages are neither supported by Arch nor Manjaro. Posts about them in Announcements topics are off-topic and will be flagged, moved or removed without warning.

For help with AUR packages, please create a new topic in Support > AUR and a helpful volunteer may be able to assist you.

Get our latest daily developer images now from Github: Plasma, GNOME, XFCE. You can get the latest stable releases of Manjaro from CDN77.

Our current supported kernels

  • linux61 6.1.174
  • linux66 6.6.141
  • linux612 6.12.91
  • linux618 6.18.33
  • linux70 7.0.10
  • linux71 7.1.0-rc5
  • linux61-rt 6.1.167_rt62
  • linux66-rt 6.6.135_rt74
  • linux612-rt 6.12.89_rt18

Package Changes (5/29/26 00:30 CEST)

  • testing core x86_64: 7 new and 7 removed package(s)
  • testing extra x86_64: 645 new and 740 removed package(s)
  • testing multilib x86_64: 8 new and 8 removed package(s)

A list of all package changes can be found here.

  • No issue, everything went smoothly
  • Yes there was an issue. I was able to resolve it myself.(Please post your solution)
  • Yes I am currently experiencing an issue due to the update. (Please post about it)
0 voters

Check if your mirror has already synced:

3 Likes
[Testing Update] 2026-05-26 - Kernels, Thunderbird, Firefox, Pipewire, Gstreamer
[404] not found error for package changes in stable update 2026-05-27
2

Known issues and solutions

This is a wiki post; please edit as necessary.
Please, consider subscribing to the Testing Updates Announcements RSS feed

Please RTFT (Read This Fine Thread) first before reporting the same issues over and over again!

Note: Do not forget to review your .pacnew files:

:arrow_right: 2026-05-29

2026-05-11

A week after Copy Fail, researcher Hyunwoo Kim disclosed a second Linux kernel flaw in the same broad area — IPsec ESP and rxrpc — that they have named Dirty Frag. The bug lives in the in-place decryption fast paths of esp4, esp6, and rxrpc: when a socket buffer carries paged fragments that are not privately owned by the kernel (e.g. pipe pages attached via splice(2)/sendfile(2)/MSG_SPLICE_PAGES), the receive path decrypts directly over those externally-backed pages, exposing or corrupting plaintext that an unprivileged process still holds a reference to.

Like the previous Copy Fail vulnerability, Dirty Frag immediately yields root on all major distributions. Every supported Manjaro release is affected. Dirty Frag chains two distinct kernel bugs, each with its own CVE: CVE-2026-43284 covers the IPsec ESP half (esp4 / esp6), and CVE-2026-43500 (NVD entry pending) covers the rxrpc half. Per Hyunwoo Kim’s public disclosure on oss-security (2026-05-07), the responsible-disclosure embargo was broken before distributions could coordinate, and a working exploit is publicly available. A second public exploit, Copy Fail 2: Electric Boogaloo, targets the same vulnerability under a different name; both reach root through the same esp4/esp6/rxrpc code paths and are blocked by the same fix.

Temporary mitigation

You can neutralize the attack surface by blacklisting the affected modules. None of esp4, esp6, or rxrpc are loaded on a typical workload that does not use IPsec transport mode or AFS, so on most systems this is safe to apply immediately:

sudo sh -c "printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf; rmmod esp4 esp6 rxrpc 2>/dev/null; true"

This writes a modprobe config that prevents the three modules from loading, and unloads them if they happen to be loaded already (the rmmod is best-effort and silent if the module isn’t present). To revert, remove /etc/modprobe.d/dirtyfrag.conf.

The Dirty Frag exploit works by corrupting page-cache pages of sensitive files (such as /etc/passwd or /usr/bin/su). If you suspect the system may have already been targeted before you applied the mitigation, drop the page cache so any tampered pages are evicted and the next read comes fresh from disk:

sudo sh -c 'echo 3 > /proc/sys/vm/drop_caches'

This is safe to run on a live system — it only frees clean cache and dentry/inode entries — and pairs well with the blacklist above.

2026-05-01

On 29 April 2026, a high local privilege escalation vulnerability in the Linux kernel, tracked as CVE-2026-31431 and named “Copy Fail”, was publicly disclosed. The vulnerability affects Manjaro Linux since 2017. A public proof-of-concept exploit has been released.

We have patched most of our kernels and released them to our testing and unstable branches:

  • patched kernels are: 5.10.254+, 5.15.204+, 6.1.170+, 6.6.137+, 6.12.85+, 6.18.22+, 6.19.12+, 7.0-rc7+
  • affected kernels are: 6.1.167_rt62, 6.6.133_rt73, 6.12.79_rt17, 6.17.5_rt7 and lower

Temporary Mitigation

Disable the algif_aead kernel module persistently on all affected systems until a patched kernel is available:

sudo su
echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true
exit

More Information: CERT-EU - High Vulnerability in the Linux Kernel ("Copy Fail")

2026-04-06

udev-usb-sync and kernel 7.0-rc

If you experience slow transfers to USB attached disks, remove the package udev-usb-sync. It is not known why the 7.0-rc kernel causes this. There may be a regression of some sort. Awaiting the final release of the 7.0 kernel before jumping to conclusions.

See [Unstable Update] April 2026 thread for more info

2026-04-23T22:00:00Z
The issue is solved with the release of 7.0 kernel

Previous testing threads:

3

Hey! Note that this Firefox version has a VERY BIG VPN icon.
It’s a bug reported here.

Which should be fixed in follow up versions!

2 Likes
4

Post-update on a plasma system with linux70-nvidia-open, encountered problems with locally installed windows games in lutris : games that previously launched fine now do not launch at all. Disabling gamescope in lutris has solved the problems for some, but not all, of the games.

5

Kernel 7.1 has still reboot regression, 7.0 is working

System:
  Host: blackbox Kernel: 7.0.10-1-MANJARO arch: x86_64 bits: 64
  Desktop: Xfce v: 4.20.2 Distro: Manjaro Linux
Machine:
  Type: Desktop Mobo: ASUSTeK model: PRIME X570-PRO v: Rev X.0x
    serial: <superuser required> Firmware: UEFI vendor: American Megatrends
    v: 5044 date: 01/04/2026
CPU:
  Info: 12-core model: AMD Ryzen 9 3900X bits: 64 type: MT MCP cache:
    L2: 6 MiB
  Speed (MHz): avg: 3368 min/max: 563/4674 cores: 1: 3368 2: 3368 3: 3368
    4: 3368 5: 3368 6: 3368 7: 3368 8: 3368 9: 3368 10: 3368 11: 3368 12: 3368
    13: 3368 14: 3368 15: 3368 16: 3368 17: 3368 18: 3368 19: 3368 20: 3368
    21: 3368 22: 3368 23: 3368 24: 3368
6

after this update, going from this machine to another and back via kvm switch dumps all my desktop icons onto the left of the screen. downgrading libxfce4windowing to 4.20.5-3 fixes it after one last reposition, for now.

7

For anyone using a later model Nvidia card, the new 610 drivers seem to be decent. Ray-tracing and Frame-gen look to be working as expected (tested with Cyberpunk). No flickering or stuttering in the DE or Firefox. Seems to have calmed the card fans down too which was a nice surprise.

I’m on XFCE and the latest LTS kernel, so results may vary under Wayland.

1 Like
8

Since this update I got about 4 hard lockups/freezes with kernel 7.10 related to pavucontrol and transmission-gtk. Those were not updated recently so I switched to 6.18 LTS and haven’t had any crashes since.
Anyone else experiences something similar?

During the week I’m not able (don’t have time) to post journals/logs. I’ll continue testing with 7.0.10 coming weekend.

9

I’m curious, but what happens with 7.0? Do you see the same crashes?

10

Issue with kernel 7.0.10 was reported yesterday - Hard crashes/freezes with kernel 7.0.10

11

I clicked on the Promotion link out of curiosity, and the Slimbook Manjaro III seems to be out of stock indefinitely.

12
13

I was just thinking that it’s been a while since I’ve seen a testing update; this explains that. Appreciate the work everyone puts in to make sure we’re kept safe from bad actors here.

1 Like
14

The AUR (Arch User Repository) is not related to official Arch or Manjaro repository packages. :wink:

2 Likes
15

Clearly, I have lots to learn; which is why I appreciate these forums.

3 Likes
16

It was mentioned in the first post of this thread:

17

X.Org Security Advisory: June 2, 2026

Issues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12

Multiple issues have been found in the X server and Xwayland implementations published by X.Org for which we are releasing security fixes for xorg-server 21.1.23 and xwayland-24.1.12

Patched packages were released to Arch and Manjaro unstable branch 2026-06-03
Arch Linux - xorg-server 21.1.23-1
Arch Linux - xorg-xwayland 24.1.12-1
but not released to testing or stable branches yet

Manjaro Branch Compare - xorg-xserver
 stable   21.1.22-2
 testing  21.1.22-2
 unstable 21.1.23-1

Manjaro Branch Compare - xwayland
 stable   24.1.11-2
 testing  24.1.11-2
 unstable 24.1.12-1

18

oh thanks for the Firefox update!
Loving the diet that the VPN icon has gone through :grin:

1 Like
19

For April Fool’s day next year, the Firefox team should have the VPN icon be absolutely massive.

3 Likes
21

Thread title is wrong. Should be 2026-05-29, not 2025-05-29. Now, it’s already a relatively long time that there have been no testing releases, but the wrong year makes the lag seem huge :wink:

3 Likes