[Testing Update] 2026-07-17 - Plasma, KDE Framework, COSMIC, Pipewire, Firefox

philm · 17 July 2026 15:27

Hello Manjaro user community, here we have another set of package updates. We are continuing our development of the upcoming release of ‘Bian-May’ which can be expected Mid or End of July. Development speed may be a little slower the upcoming weeks. However, still let us know any issues you may found thus far.

Current Promotions

Get the latest Gaming Laptop by Slimbook powered by Manjaro: Slimbook Manjaro III
Protect your personal data, keep yourself safe with Surfshark VPN: See current promotion

Recent News

New in Manjaro GNOME!

When choosing an accent color in Settings, the folder colors will now change automatically to match when using the Papirus Dark or Papirus Light icon theme.

To try it out, install gnome-shell-extension-papirus-folders-colorizer from Add/Remove Software, logout / login and enable Papirus Folder Colorizer from Extensions.

Or, if you prefer the command line:

Install:

sudo pacman -Syu gnome-shell-extension-papirus-folders-colorizer

Enable the extension:

 gnome-extensions enable papirus-folders-colorizer@NiffirgkcaJ.github.com

Logout:

gnome-session-quit --logout

Also, when applying accent colors from Layout Switcher settings, it will also set the matching folder color. Requires accent-color-change r172.c761c84-2 or newer.

KDE Plasma users with SDDM can now migrate to Plasma Login Manager

After ensuring plasma-login-manager 6.5.90-1 (or newer) is installed, run the following:

sudo pacman -Syu plasma-login-manager
systemctl disable sddm
systemctl enable plasmalogin
sudo pacman -R sddm-kcm sddm

NVIDIA 590 driver drops Pascal support

With the update to driver version 590, the NVIDIA driver no longer supports Pascal (GTX 10xx) GPUs or older.

Impact: Updating the NVIDIA packages on systems with Pascal, Maxwell, or older cards will fail to load the driver, which may result in a broken graphical environment.

Intervention required for Pascal/older users: Users with GTX 10xx series and older cards must switch to a legacy driver to maintain support:

Install the official linuxXXX-nvidia-580xx, or related DKMS packages.

Manjaro 26.1 Bian-May - Preview released
Manjaro 26.0 Anh-Linh released
Manjaro Summit public Alpha now available
As of Linux 5.4.302, the 5.4 series is now EOL (End Of Life). Please install 5.10 LTS (Long Term Support) or 5.15 LTS.
As of Linux 6.16.12, the 6.16 series is now EOL (End Of Life). Please install 6.18 LTS (Long Term Support) and/or 6.12 LTS.
As of Linux 6.17.13, the 6.17 series is now EOL (End Of Life). Please install 6.18 LTS (Long Term Support) and/or 6.12 LTS.
As of Linux 6.19.14, the 6.19 series is now EOL (End Of Life). Please install 7.0, and/or 6.18 LTS (Long Term Support) and/or 6.12 LTS.
As of Linux 7.0.14, the 7.0 series is now EOL (End Of Life). Please install 7.1, and/or 6.18 LTS (Long Term Support) and/or 6.12 LTS.

Previous News

Notable Package Updates

PipeWire 1.6.8
Firefox 152.0.6
KDE Frameworks 6.28.0
KDE Plasma 6.7.3
COSMIC Epoch 1.3.0
GStreamer 1.28.5
Wine 11.13

Additional Info

Python 3.14 info

You will need to rebuild any AUR Python packages that install files to site-packages or link to libpython3.13.so.

Print a list of of packages that have files in /usr/lib/python3.13/ :

pacman -Qoq /usr/lib/python3.13/

Rebuild them all at once:*

pamac build $(pacman -Qoq /usr/lib/python3.13)

Use rebuild-detector to see if anything else needs to be rebuilt:

 checkrebuild

* It’s recommended to clean your build cache first with pamac clean --build-files

Info about AUR packages

AUR (Arch User Repository) packages are neither supported by Arch nor Manjaro. Posts about them in Announcements topics are off-topic and will be flagged, moved or removed without warning.

For help with AUR packages, please create a new topic in Support > AUR and a helpful volunteer may be able to assist you.

Get our latest daily developer images now from Github: Plasma, GNOME, XFCE. You can get the latest stable releases of Manjaro from CDN77.

Our current supported kernels

linux61 6.1.177
linux66 6.6.144
linux612 6.12.95
linux618 6.18.38
linux71 7.1.3
linux72 7.2.0-rc3
linux61-rt 6.1.167_rt62
linux66-rt 6.6.135_rt74
linux612-rt 6.12.89_rt18

Package Changes (7/17/26 15:26 CEST)

testing core x86_64: 62 new and 62 removed package(s)
testing extra x86_64: 1486 new and 1584 removed package(s)
testing multilib x86_64: 13 new and 13 removed package(s)

A list of all package changes can be found here.

No issue, everything went smoothly
Yes there was an issue. I was able to resolve it myself.(Please post your solution)
Yes I am currently experiencing an issue due to the update. (Please post about it)

0 voters

Check if your mirror has already synced:

Mirror-Check Service

discobot · 17 July 2026 15:28

Known issues and solutions

This is a wiki post; please edit as necessary.
Please, consider subscribing to the Testing Updates Announcements RSS feed

Please RTFT (Read This Fine Thread) first before reporting the same issues over and over again!

Note: Do not forget to review your .pacnew files:

2026-07-17

2026-05-11

A week after Copy Fail, researcher Hyunwoo Kim disclosed a second Linux kernel flaw in the same broad area — IPsec ESP and rxrpc — that they have named Dirty Frag. The bug lives in the in-place decryption fast paths of esp4, esp6, and rxrpc: when a socket buffer carries paged fragments that are not privately owned by the kernel (e.g. pipe pages attached via splice(2)/sendfile(2)/MSG_SPLICE_PAGES), the receive path decrypts directly over those externally-backed pages, exposing or corrupting plaintext that an unprivileged process still holds a reference to.

Like the previous Copy Fail vulnerability, Dirty Frag immediately yields root on all major distributions. Every supported Manjaro release is affected. Dirty Frag chains two distinct kernel bugs, each with its own CVE: CVE-2026-43284 covers the IPsec ESP half (esp4 / esp6), and CVE-2026-43500 (NVD entry pending) covers the rxrpc half. Per Hyunwoo Kim’s public disclosure on oss-security (2026-05-07), the responsible-disclosure embargo was broken before distributions could coordinate, and a working exploit is publicly available. A second public exploit, Copy Fail 2: Electric Boogaloo, targets the same vulnerability under a different name; both reach root through the same esp4/esp6/rxrpc code paths and are blocked by the same fix.

Temporary mitigation

You can neutralize the attack surface by blacklisting the affected modules. None of esp4, esp6, or rxrpc are loaded on a typical workload that does not use IPsec transport mode or AFS, so on most systems this is safe to apply immediately:

sudo sh -c "printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf; rmmod esp4 esp6 rxrpc 2>/dev/null; true"

This writes a modprobe config that prevents the three modules from loading, and unloads them if they happen to be loaded already (the rmmod is best-effort and silent if the module isn’t present). To revert, remove /etc/modprobe.d/dirtyfrag.conf.

The Dirty Frag exploit works by corrupting page-cache pages of sensitive files (such as /etc/passwd or /usr/bin/su). If you suspect the system may have already been targeted before you applied the mitigation, drop the page cache so any tampered pages are evicted and the next read comes fresh from disk:

sudo sh -c 'echo 3 > /proc/sys/vm/drop_caches'

This is safe to run on a live system — it only frees clean cache and dentry/inode entries — and pairs well with the blacklist above.

2026-05-01

On 29 April 2026, a high local privilege escalation vulnerability in the Linux kernel, tracked as CVE-2026-31431 and named “Copy Fail”, was publicly disclosed. The vulnerability affects Manjaro Linux since 2017. A public proof-of-concept exploit has been released.

We have patched most of our kernels and released them to our testing and unstable branches:

patched kernels are: 5.10.254+, 5.15.204+, 6.1.170+, 6.6.137+, 6.12.85+, 6.18.22+, 6.19.12+, 7.0-rc7+
affected kernels are: 6.1.167_rt62, 6.6.133_rt73, 6.12.79_rt17, 6.17.5_rt7 and lower

Temporary Mitigation

Disable the algif_aead kernel module persistently on all affected systems until a patched kernel is available:

sudo su
echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true
exit

More Information: CERT-EU - High Vulnerability in the Linux Kernel ("Copy Fail")

2026-04-06

udev-usb-sync and kernel 7.0-rc

If you experience slow transfers to USB attached disks, remove the package udev-usb-sync. It is not known why the 7.0-rc kernel causes this. There may be a regression of some sort. Awaiting the final release of the 7.0 kernel before jumping to conclusions.

See [Unstable Update] April 2026 thread for more info

2026-04-23T22:00:00Z
The issue is solved with the release of 7.0 kernel

Previous testing threads:

Mydixadril · 18 July 2026 00:04

Got a weird update message. Googling tells me this is for OCR capabilities for a screenshot utility. I’d really rather not have this, but I also have read that doing a manual “partial” upgrade of packages is not recommended.

I suppose I could select the English data (option 30), but is there a way to not do this at all?

:: Synchronizing package databases...
 core                                                                                  149.5 KiB  58.5 KiB/s 00:03 [---------------------------------------------------------------------] 100%
 extra                                                                                   8.9 MiB  2.56 MiB/s 00:03 [---------------------------------------------------------------------] 100%
 multilib                                                                              139.9 KiB  54.9 KiB/s 00:03 [---------------------------------------------------------------------] 100%
:: Starting full system upgrade...
resolving dependencies...
:: There are 128 providers available for tessdata:
:: Repository extra
   1) tesseract-data-afr  2) tesseract-data-amh  3) tesseract-data-ara  4) tesseract-data-asm  5) tesseract-data-aze  6) tesseract-data-aze_cyrl  7) tesseract-data-bel  8) tesseract-data-ben
   9) tesseract-data-bod  10) tesseract-data-bos  11) tesseract-data-bre  12) tesseract-data-bul  13) tesseract-data-cat  14) tesseract-data-ceb  15) tesseract-data-ces
   16) tesseract-data-chi_sim  17) tesseract-data-chi_sim_vert  18) tesseract-data-chi_tra  19) tesseract-data-chi_tra_vert  20) tesseract-data-chr  21) tesseract-data-cos
   22) tesseract-data-cym  23) tesseract-data-dan  24) tesseract-data-dan_frak  25) tesseract-data-deu  26) tesseract-data-deu_frak  27) tesseract-data-div  28) tesseract-data-dzo
   29) tesseract-data-ell  30) tesseract-data-eng  31) tesseract-data-enm  32) tesseract-data-epo  33) tesseract-data-equ  34) tesseract-data-est  35) tesseract-data-eus
   36) tesseract-data-fao  37) tesseract-data-fas  38) tesseract-data-fil  39) tesseract-data-fin  40) tesseract-data-fra  41) tesseract-data-frk  42) tesseract-data-frm
   43) tesseract-data-fry  44) tesseract-data-gla  45) tesseract-data-gle  46) tesseract-data-glg  47) tesseract-data-grc  48) tesseract-data-guj  49) tesseract-data-hat
   50) tesseract-data-heb  51) tesseract-data-hin  52) tesseract-data-hrv  53) tesseract-data-hun  54) tesseract-data-hye  55) tesseract-data-iku  56) tesseract-data-ind
   57) tesseract-data-isl  58) tesseract-data-ita  59) tesseract-data-ita_old  60) tesseract-data-jav  61) tesseract-data-jpn  62) tesseract-data-jpn_vert  63) tesseract-data-kan
   64) tesseract-data-kat  65) tesseract-data-kat_old  66) tesseract-data-kaz  67) tesseract-data-khm  68) tesseract-data-kir  69) tesseract-data-kmr  70) tesseract-data-kor
   71) tesseract-data-kor_vert  72) tesseract-data-lao  73) tesseract-data-lat  74) tesseract-data-lav  75) tesseract-data-lit  76) tesseract-data-ltz  77) tesseract-data-mal
   78) tesseract-data-mar  79) tesseract-data-mkd  80) tesseract-data-mlt  81) tesseract-data-mon  82) tesseract-data-mri  83) tesseract-data-msa  84) tesseract-data-mya
   85) tesseract-data-nep  86) tesseract-data-nld  87) tesseract-data-nor  88) tesseract-data-oci  89) tesseract-data-ori  90) tesseract-data-pan  91) tesseract-data-pol
   92) tesseract-data-por  93) tesseract-data-pus  94) tesseract-data-que  95) tesseract-data-ron  96) tesseract-data-rus  97) tesseract-data-san  98) tesseract-data-sin
   99) tesseract-data-slk  100) tesseract-data-slk_frak  101) tesseract-data-slv  102) tesseract-data-snd  103) tesseract-data-spa  104) tesseract-data-spa_old  105) tesseract-data-sqi
   106) tesseract-data-srp  107) tesseract-data-srp_latn  108) tesseract-data-sun  109) tesseract-data-swa  110) tesseract-data-swe  111) tesseract-data-syr  112) tesseract-data-tam
   113) tesseract-data-tat  114) tesseract-data-tel  115) tesseract-data-tgk  116) tesseract-data-tgl  117) tesseract-data-tha  118) tesseract-data-tir  119) tesseract-data-ton
   120) tesseract-data-tur  121) tesseract-data-uig  122) tesseract-data-ukr  123) tesseract-data-urd  124) tesseract-data-uzb  125) tesseract-data-uzb_cyrl  126) tesseract-data-vie
   127) tesseract-data-yid  128) tesseract-data-yor

Enter a number (default=1):

scotty65 · 18 July 2026 00:15

Plasma’s screenshot application, spectacle, has recently implemented OCR (to extract text from screenshot images), so tesseract is a required dependency.

You should install the tesseract-data package that matches your language (for example, for English, install tesseract-data-eng).

The tesseract & tesseract-data-eng packages don’t take up much storage space:

❯ pamac info tesseract | grep Size
Installed Size        : 4.8 MB

❯ pamac info tesseract-data-eng | grep Size
Installed Size        : 23.5 MB

2old4gaming · 18 July 2026 04:53

OpenRazer 3.12.4 fixes Linux 7.2 compatibility/compile issue. We have 3.12.2, compatible up to Kernel 7.1.x Otherwise everything is working well.

tracyanne · 18 July 2026 05:40

LN [Testing Update] 2026-07-17 - Plasma, KDE Framework, COSMIC, Pipewire, Firefox - Announcements / Testing Updates - Manjaro Linux Forum — Mozilla Firefox v o X
File Edit View History Bookmarks Profies Tools Help
+ @ LGSmart! [@LGMonito ) 'Whoever @ LGandAlic @ PCUserss @ HowtoIn: [§l Manjarok: [l Products - elemental  [§l ForumRu  [jl PageNot' [ [Testing X @ stopforun ~ 178.210.2 v FreeDispc * LogicalFal ~* Appealto v
€ 5 @ © == forummanjaro.org/t/testing-update-2026-07-17-plasma-kde-framework-cosmic-pipewire-firefox/189028/4 B sx 2@ %% C L & v 0 @ 6 ® & . 0fH o » @ s @
Plasma’s screenshot application, spectacle , has recently implemented OCR (to
@ extract text from screenshot images), so tesseract is a required dependency.
51
£ Topics ® You should install the tesseract-data package that matches your language (for
example, for English, install tesseract-data-eng). 18 Jul
2 My posts ®
The tesseract & tesseract-data-eng packages don't take up much storage
& My messages ®
space: &
™ Review .
) ) pamac info tesseract | grep Size oo 415
& Admin Installed Size : 4.8 MB 18 Jul
4 Invite ) pamac info tesseract-data-eng | grep Size
Installed Size : 23.5 MB
@scottyGS Y X
A B I T ® 9 < @ = = 0 O Any idea where the Extracted text is saved to, or indeed how to save it, as there
appears to be no option to save the text, only extract it.
Any idea where the Extracted text is saved to, or indeed how to save it, as there
appears to be no option to save the text, only extract it.
4 Reply [ENELE «

Seems to work as advertised on the tin.

Yochanan · 18 July 2026 14:23

I’ve just pushed openrazer 3.12.4-0.1 packages.

AwwsmGaurav · 18 July 2026 15:10

Are these vulnerabilities still active? When will it be good time to remove the temporary mitigations? doesn’t seem like temporary anymore…

Wollie · 18 July 2026 17:26

You should be fine with kernel 7.0.6 / kernel 6.18.28 or newer.

philm · 18 July 2026 17:54

ISOs including this update: Release 202607181700 · manjaro/release-review · GitHub

Mydixadril · 18 July 2026 20:46

All’s working fine with the update; shout out to everyone who worked on this release, and thanks to those on Unstable branch!

rousseau · 19 July 2026 04:46

@philm A couple of comments…

1. GNOME ISO now requires user to enter password at gdm login

I noticed that manjaro-gnome-26.1-testing-260718-linux71.iso now boots and stops at the gdm login screen. The user then needs to enter manjaro as the password before they can reach the GNOME desktop. I personally did not know the password, but I correctly guessed that it is manjaro.

Is this intended behaviour ?

From memory, the last time that I tested a GNOME ISO, it booted all the way to the GNOME desktop without any need for me to know or to enter a password.

2. KDE ISO still does not boot

This had been previously been flagged in the preview release announcement, but there still appear to be boot problems for at least one of the 20260718 KDE ISOs : manjaro-kde-26.1-testing-260718-linux71.iso does not boot, for example.

To avoid any doubt, I issued the commands below to download, extract, verify and write the KDE ISO ^[1].

Is there something that I am missing ? Thanks.

wget https://github.com/manjaro/release-review/releases/download/202607181700/manjaro-kde-26.1-testing-260718-linux71.iso.z01
wget https://github.com/manjaro/release-review/releases/download/202607181700/manjaro-kde-26.1-testing-260718-linux71.iso.z02
wget https://github.com/manjaro/release-review/releases/download/202607181700/manjaro-kde-26.1-testing-260718-linux71.iso.zip
wget https://github.com/manjaro/release-review/releases/download/202607181700/manjaro-kde-26.1-testing-260718-linux71.iso.sha512

7z x manjaro-kde-26.1-testing-260718-linux71.iso.zip

sha512sum manjaro-kde-26.1-testing-260718-linux71.iso

sudo dd bs=4M if=manjaro-kde-26.1-testing-260718-linux71.iso of=/dev/sda status=progress oflag=sync

Similar steps were performed for manjaro-gnome-26.1-testing-260718-linux71.iso, which successfully boots. ↩︎

linux-aarhus · 19 July 2026 05:15

This is a general issue

No, it is not

Troubleshooting launching xfce/any session on live ISO

The manjaro-get-iso package facilitates fetching the latest ISOs, release, review and preview alike.

deroberts1 · 20 July 2026 19:36

Dolphin launches as a completely unreadable screen. So, far, other apps seem fine. Will check on this.

2old4gaming · 20 July 2026 19:51

journalctl -f yield any clues/errors?

deroberts1 · 20 July 2026 20:14

I changed it to full screen, and that fixed it. Resizes now. So, some weird glitch I guess. Consider it solved.

Aragorn · 22 July 2026 12:31