The uutils project shipped Rust Coreutils 0.9.0 at the end of May 2026. The release follows months of work triggered by a third-party security audit. That audit, funded by Canonical, uncovered dozens of issues. Many centered on time-of-check-to-time-of-use races. Others involved subtle differences from GNU behavior. Developers responded quickly. They added a new safe_copy module inside uucore. They tightened recursive traversal logic in cp, mv and chmod. Rm now handles dot and dot-dot paths with extra care. Nohup creates its output file with mode 0600. Chroot resolves all user and group IDs before switching root. These changes close many of the reported problems. Phoronix first reported the release and its security focus ( https://www.phoronix.com/news/Rust-Coreutils-0.9 ). But 0.9.0 delivers more than fixes. The team cut the amount of unsafe Rust code across the board. Dozens of blocks disappeared. Low-level system calls moved from the nix and libc crates to rustix. The shift shrinks the attack surface.…