fips-updates UA service does not seem to disable MD5
The Ubuntu docs imply that only a subset of packages are FIPS 140 validated components available with Ubuntu Advantage and Ubuntu Pro, including:
- Linux Kernel Crypto API
- OpenSSH client
- OpenSSH server
- OpenSSL
- libcrypt
- StrongSwan
with python3 not being one of them. And with Python's _md5 module implemented from scratch in C, it seems to be able to exist outside of FIPS 140-2 enforcement currently.