RPM 6.0 Released With OpenPGP Improvements & Enforces Signature Checking By Default
RPM 6.0 is out today as the newest major update to the RPM Package Manager as the package management system most commonly associated with Red Hat / Fedora, openSUSE, Mageia / OpenMandriva, and others.
RPM 6.0 retains compatibility with RPM v4 and RPM v5 packages but removing support for installing RPM v3 packages. RPM 6.0 introduces new features like supporting multiple OpenPGP signatures per package. There is also support with RPM 6.0 for OpenPGP v6 and PQC keys and signatures. RPM 6.0 also adds support for updating previously imported keys.
RPM 6.0 also now defaults to enforcing signature checking, uses the full key ID or fingerprint to now identify OpenPGP keys everywhere, overhauling of RPM documentation and its man page, and making the release tarballs more reproducible/verifiable.
More information on today's RPM 6.0 release via RPM.org.
RPM 6.0 retains compatibility with RPM v4 and RPM v5 packages but removing support for installing RPM v3 packages. RPM 6.0 introduces new features like supporting multiple OpenPGP signatures per package. There is also support with RPM 6.0 for OpenPGP v6 and PQC keys and signatures. RPM 6.0 also adds support for updating previously imported keys.
RPM 6.0 also now defaults to enforcing signature checking, uses the full key ID or fingerprint to now identify OpenPGP keys everywhere, overhauling of RPM documentation and its man page, and making the release tarballs more reproducible/verifiable.
More information on today's RPM 6.0 release via RPM.org.