Ubuntu's 'Rust-ification' Hits New Milestone: Coreutils Migration is Complete (itsfoss.com)
(Friday September 18, 2026 @03:04PM (EditorDavid)
from the Rust-never-sleeps dept.)
"Ubuntu has managed to do away with GNU Core Utilities in its default stack," [1]reports the blog It's FOSS .
The last three utilities — cp , mv and rm — have been moved to versions from the uutils project (which reimplements utilities in Rust).
> Everything else, from ls and cat to chmod and du , made that jump in earlier releases... Canonical [2]started "oxidizing" Ubuntu last year , and Ubuntu 25.10 became the first release to ship [ the uutils project's] coreutils as the default. That release also made [3] sudo-rs the default privilege tool, replacing a command that had been in place for decades.
>
> 26.04 was the release where the plan did slow down quite a bit, as Canonical kept cp , mv , and rm on their GNU versions due to a bunch of [4]TOCTOU issues that were blocking the full implementation. These were caught during an audit, when Canonical commissioned Zellic [5]for two rounds between December 2025 and March 2026, focusing on the most security-sensitive utilities first. Across both rounds, Zellic raised 113 issues, and 44 of them were assigned CVEs. Canonical says the vast majority have been resolved.
>
> Getting here has had its ups and downs, and the last stretch was not clean. In July, uutils cp went [6]back into the archive and came straight out again after it broke live image builds. The fix was quick; as the developers marked it "Critical," the fix went upstream, and the migration landed in time for 26.10.
>
> When typing commands, nothing changes for you on the surface. uutils coreutils is designed to be a drop-in replacement for essential GNU tools, and the project treats any divergence from GNU as a bug, further pointing out that some options may still be missing or behave differently. So if you prefer staying on the GNU version, you have the option to install the coreutils-from-gnu [7]package that houses all the required components.
[1] https://itsfoss.com/news/ubuntu-rustification-coreutils-migration/
[2] https://discourse.ubuntu.com/t/carefully-but-purposefully-oxidising-ubuntu/56995
[3] https://itsfoss.com/sudo-vs-sudo-rs/
[4] https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use
[5] https://discourse.ubuntu.com/t/an-update-on-rust-coreutils/80773
[6] https://bugs.launchpad.net/ubuntu/+source/coreutils-from/+bug/2158691
[7] https://packages.ubuntu.com/stonking/coreutils-from-gnu
The last three utilities — cp , mv and rm — have been moved to versions from the uutils project (which reimplements utilities in Rust).
> Everything else, from ls and cat to chmod and du , made that jump in earlier releases... Canonical [2]started "oxidizing" Ubuntu last year , and Ubuntu 25.10 became the first release to ship [ the uutils project's] coreutils as the default. That release also made [3] sudo-rs the default privilege tool, replacing a command that had been in place for decades.
>
> 26.04 was the release where the plan did slow down quite a bit, as Canonical kept cp , mv , and rm on their GNU versions due to a bunch of [4]TOCTOU issues that were blocking the full implementation. These were caught during an audit, when Canonical commissioned Zellic [5]for two rounds between December 2025 and March 2026, focusing on the most security-sensitive utilities first. Across both rounds, Zellic raised 113 issues, and 44 of them were assigned CVEs. Canonical says the vast majority have been resolved.
>
> Getting here has had its ups and downs, and the last stretch was not clean. In July, uutils cp went [6]back into the archive and came straight out again after it broke live image builds. The fix was quick; as the developers marked it "Critical," the fix went upstream, and the migration landed in time for 26.10.
>
> When typing commands, nothing changes for you on the surface. uutils coreutils is designed to be a drop-in replacement for essential GNU tools, and the project treats any divergence from GNU as a bug, further pointing out that some options may still be missing or behave differently. So if you prefer staying on the GNU version, you have the option to install the coreutils-from-gnu [7]package that houses all the required components.
[1] https://itsfoss.com/news/ubuntu-rustification-coreutils-migration/
[2] https://discourse.ubuntu.com/t/carefully-but-purposefully-oxidising-ubuntu/56995
[3] https://itsfoss.com/sudo-vs-sudo-rs/
[4] https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use
[5] https://discourse.ubuntu.com/t/an-update-on-rust-coreutils/80773
[6] https://bugs.launchpad.net/ubuntu/+source/coreutils-from/+bug/2158691
[7] https://packages.ubuntu.com/stonking/coreutils-from-gnu