Jann Horn discovered a vulnerability in the fuse (Filesystem in
Userspace) package in Debian. The fuse package ships an udev rule
adjusting permissions on the related /dev/cuse character device, making
it world writable.