Re: [Valgrind-users] Valgrind 3.13.0 tarball hosted at sourceware.org - legit or not?

[Zhiming W. <zm...@gm...>]

By the way, just a suggestion, maybe you could publish the
SHA-256 checksums of release tarballs instead of MD5? MD5 was
cracked more than a decade ago (although I haven't looked into
the feasibility of producing a collision that still compiles when
unpacked).

Zhiming