● Covered by 1 source · 1 reportMedium impact1 neutral
Ubuntu 26.10 Completes Transition to Rust-Based Core Utilities
Key points
- Ubuntu 26.10 ships with a full set of Rust-based core utilities.
- Commands like `cp`, `mv`, `rm` are now Rust-based after security fixes.
- The migration aims to improve security by using Rust's memory safety.
- Ubuntu 25.10 was the first release with Rust-based utilities and `sudo`.
Full Rust Core Utilities in Ubuntu 26.10
Ubuntu 26.10, known as 'Stonking Stingray', will include a complete suite of Rust-based core utilities. This marks the culmination of a project by Canonical engineers to replace foundational C software with Rust alternatives, a process they began in 2025. The release will feature Rust versions of common command-line tools such as `ls`, `cat`, `chmod`, and `du`.
Addressing Previous Security Concerns
The migration of certain utilities, specifically `cp`, `mv`, and `rm`, was delayed in Ubuntu 26.04 LTS. This was due to time-of-check to time-of-use (TOCTOU) security vulnerabilities identified in their `uutils` Rust versions. These issues have since been resolved upstream, allowing Ubuntu 26.10 to complete the transition.
Security Benefits of Rust
Canonical's motivation for 'oxidising' the distribution stems from the security advantages offered by Rust. Rust compilers can detect memory bugs during compilation, a capability that C compilers lack. This shift is intended to reduce the likelihood of memory-related security vulnerabilities in the operating system's core components.
The migration has involved careful planning, including commissioning a security audit of `uutils` before the 26.04 release. Canonical also supports the Trifecta Tech Foundation with an annual €40,000 contribution to fund Rust software development, including a Rust-based rewrite of the Network Time Protocol (NTP) which Ubuntu plans to adopt by 27.10.
User Impact and Release Schedule
For end-users, the completion of the core utilities migration is not expected to introduce functional differences. The Rust-based `uutils` are designed for drop-in compatibility with their GNU counterparts, treating any deviations as bugs. The primary goal of this change is enhanced security rather than new features.
The beta version of Ubuntu 26.10 'Stonking Stingray' is scheduled for release later this month, with the stable version expected on October 15, 2026.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub Zellic/publicationsReporting from
Ubuntu 26.10, codenamed 'Stonking Stingray', will ship with a full set of Rust-based core utilities, completing a migration initiated in 2025. This transition replaces C-based foundational software with Rust alternatives to enhance security by catching memory bugs at compile time. The release resolves previous security issues that had delayed the migration of commands like `cp`, `mv`, and `rm` in Ubuntu 26.04 LTS.