[Bug 1883983] Re: MD5 is comprehensively broken at this point

[Bug Watch Updater]

** Changed in: debhelper (Debian)
       Status: Won't Fix => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dpkg in Ubuntu.
https://bugs.launchpad.net/bugs/1883983

Title:
  MD5 is comprehensively broken at this point

Status in debsums package in Ubuntu:
  New
Status in dpkg package in Ubuntu:
  New
Status in debhelper package in Debian:
  Fix Released
Status in debsums package in Debian:
  Confirmed

Bug description:
  https://en.wikipedia.org/wiki/MD5#Collision_vulnerabilities - MD5 is
  comprehensively broken at this point. Debsums still claims to be using
  md5.

  Perhaps it is time to either remove debsums as being insufficient to
  the task, or upgrade the hash that debsums uses to a stronger hash.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/debsums/+bug/1883983/+subscriptions