Latest Linux and open source news from around the web

Blue Light Blocking Glasses Sponsored · View on Amazon → YubiKey 5 NFC Security Key Sponsored · View on Amazon →
OMG! Ubuntu

Ubuntu 26.10 could drop btrfs, ZFS and LUKS support from GRUB

Ubuntu engineers are debating ways to reduce the number of features present in the signed version of GRUB, the boot loader used on systems with Secure Boot enabled. Canonical engineer Julian Klode proposes dropping support for /boot on btrfs, HFS+, XFS and ZFS filesystems, along side GRUB’s JPEG and PNG image parsers, ahead of Ubuntu 26.10. Apple partition table support, LVM volume handling, all software RAID except RAID 1 and, more controversially, LUKS-encrypted /boot partitions are also on the chopping block. β€œThe timing here is crucial”, Klode says, adding that β€œby performing the changes directly after an LTS, we can keep affected […]

Phoronix

DRBD Driver Working To Land ~15 Years Worth Of Changes Into The Linux Kernel

Developers behind the Distributed Replicated Block Device "DRBD" for mirroring block devices between multiple host systems are working to resync the upstream Linux kernel DRBD support with the out-of-tree DRBD code they have been maintaining for the past ~15 years out-of-sync. It's a big undertaking but they have begun staging patches for review and testing to get this massive set of changes up to par for mainline...

Foss Force

ODF: Open by Design, Not by Marketing

ODF was built in the open, under public standards bodies, to be fully implementable by anyone. OOXML’s β€œstandard” status hides a legacy format that only Microsoft can truly unlock. The post ODF: Open by Design, Not by Marketing appeared first on FOSS Force.

LWN.net

[$] The many failures leading to the LiteLLM compromise

LiteLLM is a gateway library providing access to a number of large language models (LLMs); it is popular and widely used. On March 24, the word went out that the version of LiteLLM found in the Python Package Index (PyPI) repository had been compromised with information-stealing malware and downloaded thousands of times, sparking concern across the net. This may look like just another supply-chain attack β€” and it is β€” but the way it came about reveals just how many weak links there are in the software supply chains that we all depend on.

LWN.net

The telnyx packages on PyPI have been compromised

The SafeDep blog reports that compromised versions of the telnyx package have been found in the PyPI repository: Two versions of telnyx (4.87.1 and 4.87.2) published to PyPI on March 27, 2026 contain malicious code injected into telnyx/_client.py. The telnyx package averages over 1 million downloads per month (~30,000/day), making this a high-impact supply chain compromise. The payload downloads a second-stage binary hidden inside WAV audio files from a remote server, then either drops a persistent executable on Windows or harvests credentials on Linux/macOS.