Reflash.

Or, theoretically, there's now the option of a deb being created with a setuid shell in it. Unfortunately, no-one's created one yet.