RPM Package Manager

The RPM Package Manager (RPM) is a powerful package management system capable of

• building computer software from source into easily distributable packages
• installing, updating and uninstalling packaged software
• querying detailed information about the packaged software, whether installed or not
• verifying integrity of packaged software and resulting software installation

News

RPM 6.0.1 released! (Dec 10 2025)

• This is a bugfix release addressing a couple of regressions in RPM 6.0.0 and some other issues.
• See the release notes for details and download information.

RPM 6.0.0 released! (Sep 22 2025)

• See the release notes for details and download information.
• Highlights include:
  • Support for both RPM v4 and v6 packages (see Compatibility Notes)
  • Support for multiple OpenPGP signatures per package (#3385)
  • Support for OpenPGP v6 and PQC keys and signatures (#3363)
  • Support for updating previously imported keys (#2577)
  • Support for installing RPM v3 packages has been removed (#1107)
  • RPM defaults to enforcing signature checking (#1573)
  • RPM uses the full key ID or fingerprint to identify OpenPGP keys everywhere (#2403)
  • Man page and other documentation overhaul (#3612, #3669, #3751)
  • Pristine and verifiable release tarballs (#3565) (#2702)

RPM 6.0.0 RC1 released! (Sep 22 2025)

• This is the first release candidate of 6.0, the main changes being miscellanenous bugfixes and man page updates.
• See the release notes for details and download information.
• Highlights include:
  • Add man page for rpmuncompress(1) and rpm-version(7) (#3624)
  • Add support for E2K architecture
  • Fix rpm2archive(1) using the same suffix for tar and cpio (#3922)
  • Fix randomly failing dependency generator tests (#2470)
  • Fix a segfault and memory leaks in rpmgraph(1)
  • Fix --hash, --percent and --test not working with --restore (#3917)
  • Fix legacy signature tags getting copied into v6 packages (#3852)
  • Fix 6.0 alpha regression on --restore --all (#3904)
  • Fix 6.0 alpha regression on user queries after --rebuilddb (#3886)
  • Fix 6.0 alpha regression on reading an rpmrc file with a macrofilesdirective (#3901)
  • Update gendiff(1), rpm2archive(1), rpmbuild(1), rpmdeps(1) andrpmgraph(1) man pages to the new style (#3669)
  • Update translations
  • Drop support for obsolete --nodirtokens rpmbuild(1) switch (#3927)

RPM 6.0.0 BETA2 released! (Aug 27 2025)

• This is the second beta release of 6.0, the main changes being support for OpenPGP v6 signatures and various bugfixes, especially to package signing.
• See the release notes for details and download information.
• Highlights include:
  • Fix fingerprinting regression in 6.0 alpha (#3762)
  • Fix rpmsign possibly adding multiple legacy tags (#3878)
  • Fix rpmsign possibly copying a OpenPGP v6 signature into legacy tag (#3851)
  • Fix regression on signature size reservation not being used (#3768)
  • Fix race condition in brp-strip-comment-note (#3868)
  • Fix segfault on invalid output from multi-mode dependency generator (#3821)
  • Fix Lua rpm.glob() not honoring the c argument (#3794)
  • Fix alternatives mechanism unintentionally kicking in for signatures (#3872)
  • Fix sources and patches stored in reverse order in headers (#3014)
  • Add support for OpenPGP v6 signatures (#3845) (#3846)
  • Add SHA512 payload digest to appease CNSA 2.0 (#3894)
  • Add rpm-manifest(5) man page (#3650)
  • Drop pre-4.6 rpmlib() dependencies from v6 packages

RPM 6.0.0 BETA1 released! (Jul 01 2025)

• This is the first beta release of 6.0 and is mainly about documentation and finalizing the v6 file format.
• See the release notes for details and download information.
• Highlights include:
  • Several new man-pages (#3612)
  • Python module isolation support (RhBug:2327289)
  • Signature related fixes and enhancements
  • Scriptlet failures are reflected in transaction return code again (#2581)

RPM 6.0.0 ALPHA1 released! (Apr 08 2025)

• See the release notes for details and download information.
• Highlights include:
  • RPM defaults to enforcing signature checking (#1573)
  • RPM uses the full key ID or fingerprint to identify OpenPGP keys everywhere (#2403)
  • Support for multiple OpenPGP signatures per package (#3385)
  • Support for updating previously imported keys (#2577)
  • Support for both RPM v4 and v6 packages
  • Support for installing RPM v3 packages has been removed (#1107)
  • By default, RPM no longer verifies obsolete crypto (MD5, SHA1, DSA) (#1292)
  • Man page overhaul (work in progress as of 6.0 alpha)
  • Pristine and verifiable release tarballs (#3565) (#2702)

RPM 4.20.1 released! (Feb 19 2025)

• This is primarily a bugfix release addressing a handful of regressions in RPM 4.20.0 as well as various other issues.
• See the release notes for details and download information.
• Highlights include:
  • Support for fully locked user accounts in sysusers.d(5) files
  • Filter Lua deprecation warnings based on the originating RPM version
  • Fix regressions in rpmsign(8), rpmspec(8), %debug_package and more
  • Fix unmodified %config (and possibly other) files being removed in case of unpack failure
  • Fix IMA plugin causing transaction failures in rootless containers
  • Fix sqlite rpmdb growing over time

RPM 4.20.0 released! (Oct 07 2024)

• See the release notes for details and download information.
• Highlights include:
  • Declarative build system support
  • Dynamic spec improvements
  • Guaranteed, RPM-controlled per-build directory
  • Support for spec-local file attributes and generators
  • Support for group membership in sysusers.d(5) files
  • Proper distro-agnostic debuginfo support
  • Sanitized spec comments and indentation syntax
  • Sanitized --build-in-place mode
  • New unshare plugin for scriptlet isolation
  • Plugin API made public

RPM 4.20.0 RC2 released! (Sep 10 2024)

• See the release notes for details and download information.
• Highlights include:
  • Make %autosetup -C also work with zip/7zip archives
  • Fix a long-standing bug in %transfiletriggerpostun where it only matchedagainst the first listed prefix
  • A handful of other small fixes

RPM 4.20.0 RC1 released! (Aug 30 2024)

• This release is about the finishing touches for the major features and various other fixes.
• See the release notes for details and download information.
• Highlights include:
  • Declarative buildsystem fixes
  • Compatibility of --build-in-place with the new build directory layout
  • Debuginfo generation and error reporting fixes

RPM 4.20.0 BETA1 released! (Jun 24 2024)

• This is all about bugs, alpha regressions and spec backwards compatibility, in particular regarding the new debuginfo enablement and %builddir related issues.
• See the release notes for details and download information.

RPM 4.20.0 ALPHA2 released! (May 20 2024)

• This is another alpha snapshot that addresses a couple of bugs found in the first one and adds two new features.
• See the release notes for details and download information.
• Highlights include:
  • Fix faulty interaction between the scriptlet prepend/append options and the BuildSystem tag (#3024) which affected the users test-driving the new Declarative buildsystem feature
  • Add proper, built-in debuginfo enablement logic (#2204)
  • Add support for a timestamp handling policy, exposed via the new %build_mtime_policy macro

For older news, head over to the timeline.