Does the hole enable anything else than circumvention of aegis? Because there is no aegis in ubuntu and I am happily using it, thus there could be a potential .deb file that has rm -rf / in postinst. But is that a real threat?