---
id: GHSA-fq3w-p4fg-mw73
title: >-
  fixurjavainstall: Previous Fuji versions can accidentally wipe
  `/usr/share/man/man8`
summary: >-
  fixurjavainstall: Previous Fuji versions can accidentally wipe
  `/usr/share/man/man8`
severity: low
cwe:
  - CWE-489
vendor: fixurjavainstall
product: fixurjavainstall
ecosystem: rust
affected:
  - fixurjavainstall <= 0.8.0
patched:
  - fixurjavainstall 0.8.1
published: '2026-06-25'
updated: '2026-06-25'
source: GHSA
sourceUrl: 'https://github.com/advisories/GHSA-fq3w-p4fg-mw73'
references:
  - url: >-
      https://github.com/EpicVon2468/fixurjavainstall/security/advisories/GHSA-fq3w-p4fg-mw73
  - url: 'https://github.com/advisories/GHSA-fq3w-p4fg-mw73'
tags:
  - ghsa
  - rust
ingestedAt: '2026-06-26T16:43:14.242Z'
---

## Overview

### Impact
Affects: Anyone who generates the UNIX man pages in Fuji <= `0.8.0` build with the `dev` crate feature.
Consequences: `/usr/share/man/man8` may be entirely removed & re-created without any of the previous entries.

### Patches
At the time of writing, no new version has been released on crates.io, due to an unrelated CI/CD publishing issue.
Due to the same unrelated publishing issue, no new GitHub Releases version has been released.

### Workarounds
Do not run `fuji manual` on non-`dev` builds for versions <= `0.8.0`.

### Additional Information
This bug results from development-only code being accidentally left in for release use.
Previous versions of Fuji are still "safe" to use, provided that you do not run `fuji manual`.
There is no malicious potential from this, it's just a major annoyance to accidentally remove all your sysadmin man pages.

## Affected packages

- `fixurjavainstall <= 0.8.0`

## Remediation

Upgrade to a patched release:

- `fixurjavainstall 0.8.1`