To track it down, I took the 14.04.1 media 119cb63b48c9a18f31f417f09655efbd again and installed it without any updates.
Doing that, I got the two
144bf4beed11fb77e5ad629452741310 /boot/vmlinuz-3.13.0-32-generic
b1b8894ae2e3b547dca0e288634cce4a /sbin/start-stop-daemon
again. So, the problem should be reprocudable by anyone. I would appreciate if someone could double check this.
This kind of problem should be avoided in future by making sure that debsums can safely check integrity of installed packages again. We totally rely on such instruments when it comes to security. Especially when core components are affected.
To track it down, I took the 14.04.1 media 119cb63b48c9a18 f31f417f09655ef bd again and installed it without any updates.
Doing that, I got the two 7e5ad6294527413 10 /boot/vmlinuz- 3.13.0- 32-generic 7dca0e288634cce 4a /sbin/start- stop-daemon
144bf4beed11fb7
b1b8894ae2e3b54
again. So, the problem should be reprocudable by anyone. I would appreciate if someone could double check this.
This kind of problem should be avoided in future by making sure that debsums can safely check integrity of installed packages again. We totally rely on such instruments when it comes to security. Especially when core components are affected.
Best regards
Thomas