{"id":"GHSA-fq3w-p4fg-mw73","title":"fixurjavainstall: Previous Fuji versions can accidentally wipe `/usr/share/man/man8`","summary":"fixurjavainstall: Previous Fuji versions can accidentally wipe `/usr/share/man/man8`","severity":"low","cwe":["CWE-489"],"vendor":"fixurjavainstall","product":"fixurjavainstall","ecosystem":"rust","affected":["fixurjavainstall <= 0.8.0"],"patched":["fixurjavainstall 0.8.1"],"published":"2026-06-25","updated":"2026-06-25","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-fq3w-p4fg-mw73","references":[{"url":"https://github.com/EpicVon2468/fixurjavainstall/security/advisories/GHSA-fq3w-p4fg-mw73"},{"url":"https://github.com/advisories/GHSA-fq3w-p4fg-mw73"}],"tags":["ghsa","rust"],"ingestedAt":"2026-06-26T16:43:14.242Z","slug":"GHSA-fq3w-p4fg-mw73","body":"## Overview\n\n### Impact\nAffects: Anyone who generates the UNIX man pages in Fuji <= `0.8.0` build with the `dev` crate feature.\nConsequences: `/usr/share/man/man8` may be entirely removed & re-created without any of the previous entries.\n\n### Patches\nAt the time of writing, no new version has been released on crates.io, due to an unrelated CI/CD publishing issue.\nDue to the same unrelated publishing issue, no new GitHub Releases version has been released.\n\n### Workarounds\nDo not run `fuji manual` on non-`dev` builds for versions <= `0.8.0`.\n\n### Additional Information\nThis bug results from development-only code being accidentally left in for release use.\nPrevious versions of Fuji are still \"safe\" to use, provided that you do not run `fuji manual`.\nThere is no malicious potential from this, it's just a major annoyance to accidentally remove all your sysadmin man pages.\n\n## Affected packages\n\n- `fixurjavainstall <= 0.8.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `fixurjavainstall 0.8.1`","depth":"sunlit","depthScore":14,"depthScoreParts":{"impact":13.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}