This bug was fixed in the package fuse - 2.9.3-16ubuntu1

---------------
fuse (2.9.3-16ubuntu1) wily; urgency=low

  * Merge from Debian unstable. (LP: #1458397) Remaining changes:
    - debian/fuse-udeb.install:
      + Install ulockmgr_server.
    - debian/fuse.udev:
      + Don't install the udev rules; we require the fuse module to be
        built-in, and mountall/systemd handle mounting /sys/fs/fuse/connections.
  * Drop following change, no longer applicable:
    - debian/fuse.postinst:
      + Only change the ownership or mode of /etc/fuse.conf
        on initial installation.
    - Drop the Ubuntu specific way of making fusermount suid root. Using
      dpkg-statoverride for this works perfectly well and allows admins to
      un-setuid it. [Martin Pitt]

fuse (2.9.3-16) unstable; urgency=high

  * Sync with Ubuntu.
  * Update Standards-Version to 3.9.6 .

  [ Marc Deslauriers <email address hidden> ]
  * SECURITY UPDATE: privilege escalation via insecure environment
    - debian/patches/CVE-2015-3202.patch: use execle to run external
      helpers in lib/mount_util.c, util/mount_util.c.
    - CVE-2015-3202 (closes: #786439).

fuse (2.9.3-15) unstable; urgency=low

  * Use correct long option for udevadm in postinst (closes: #756582).

fuse (2.9.3-14) unstable; urgency=low

  * New maintainer (closes: #756548).
  * Add watch file.

fuse (2.9.3-13) unstable; urgency=low

  * I don't care anymore, not worth it.. orphaning.

fuse (2.9.3-12) unstable; urgency=low

  * Cherry-picking patch from upstream for arm64 (Closes: #752081).

fuse (2.9.3-11) unstable; urgency=low

  * Improving fuse.postinst to handle device creation a bit better
    (Closes: #743360).

fuse (2.9.3-10) unstable; urgency=low

  * Conditionally only trigger udevadm only when /dev/fuse has already
    been available (Closes: #745295).

fuse (2.9.3-9) unstable; urgency=low

  * Loading fuse module in postinst to cover some edge cases where udev
    reloading would fail (Closes: #743360).

fuse (2.9.3-8) unstable; urgency=low

  * Building with dh --parallel.

fuse (2.9.3-7) experimental; urgency=low

  * Adding patch from Fabrice Bauzac <email address hidden> to use dlsym()
    instead of relying on ld.so constructor functions to load modules
    (Closes: #737143).
  * Updating year in copyright for 2014.

fuse (2.9.3-6) experimental; urgency=low

  * Adding explicit permissions to udev rule for device nodes.

fuse (2.9.3-5) experimental; urgency=low

  * Updating to standards version 3.9.5.
  * Building with dh-autoreconf (Closes: #732285).
  * Dropping fuse group (Closes: #733312).

fuse (2.9.3-4) experimental; urgency=low

  * Updating vcs fields.

fuse (2.9.3-3) experimental; urgency=low

  * Simplyfing libfuse2 symbols by marking linux-only symbols as linux-
    only rather than to ship two different sets for linux and kfreebsd,
    thanks to Pino Toscano <email address hidden> (Closes: #717197).

fuse (2.9.3-2) experimental; urgency=low

  * Adding vcs fields.
  * Wrapping control fields.
  * Adding lintian overrides.

fuse (2.9.3-1) experimental; urgency=low

  * Merging upstream version 2.9.3.
  * Updating year in copyright file.

fuse (2.9.2-9) experimental; urgency=low

  * Updating kfreebsd symbols files again.

fuse (2.9.2-8) experimental; urgency=low

  * Correcting fuse-dbg package description.
  * Harmonizing dpkg-statoverride calls in postinst.
  * Excluding package on hurd by explicitly listing linux-any and
    kfreebsd-any, it doesn't build on hurd anyway.
  * Adding kfreebsd specific symbols file for libfuse2.

fuse (2.9.2-7) experimental; urgency=low

  * Creating an udev event rather than reloading udev (Closes: #679930).
  * Only creating /dev/fuse with MAKEDEV if it doesn't already exist.
  * Clarify manpage that fusermount is used for unmounting only these days
    (Closes: #651556).

fuse (2.9.2-6) experimental; urgency=low

  * Adding initial symbols file for libfuse, thanks to Pino Toscano
    <email address hidden> (Closes: #559473).

fuse (2.9.2-5) experimental; urgency=low

  * Including header files in examples (Closes: #626522).
  * Prefixing patches with four digits in filenames.
  * Trimming diff headers in patches.

 -- Artur Rona <email address hidden>  Sun, 24 May 2015 22:59:58 +0200