The incident in the links I posted exploited several bugs AFAICS, so it's a different story than a single hash collision bug, it seems.