GoKawiilUbuntu 26.10 finishes switch to Rust-based coreutils, replacing cp, mv and rm
Canonical's Ubuntu 26.10 completes its migration to Rust-written core utilities after resolving TOCTOU security flaws that had forced cp, mv and rm to remain on their GNU versions in 26.04 LTS. The release, codenamed 'Stonking Stingray', now ships a full uutils suite covering tools like ls, cat, chmod and du.
GoKawiil's interpretation of the reporting above, not reported fact.
Rust's compile-time memory safety checks close a class of vulnerabilities that C-based tools have long been prone to, making this a security-driven overhaul rather than a feature update. Canonical's continued funding of the Trifecta Tech Foundation and its Rust rewrite of NTP signals a broader, sustained push to harden Ubuntu's foundational software over multiple release cycles.
- Ubuntu 26.10 completes the shift from GNU to Rust-based coreutils, including previously held-back cp, mv and rm.
- The delay was caused by TOCTOU security bugs found in a Canonical-commissioned audit, since fixed upstream in uutils.
- Canonical funds Rust software development via Trifecta Tech Foundation and plans a Rust-based NTP client by Ubuntu 27.10.
Source: omgubuntu.co.uk — Joey Sneddon, 2026-09-14
Published there as: “Ubuntu 26.10 completes transition to Rust-based coreutils”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.