Ben Finney <ben+debian@benfinney.id.au> writes: > That's a great result. > > Can you suggest a means of searching for more occurrences of this bug > (a non-free MD5 implementation in an otherwise-free work) in Debian? The RSA-licensed MD5 implementation is not non-free. It just has an advertising clause. -- Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>