RPM 6.0.0 ALPHA1 Release Notes

April 08, 2025

For more information on the upcoming 6.0.0 release, see the full release notes.

RPM defaults to enforcing signature checking (#1573)
RPM uses the full key ID or fingerprint to identify OpenPGP keys everywhere (#2403)
Support for multiple OpenPGP signatures per package (#3385)
Support for updating previously imported keys (#2577)
Support for both RPM v4 and v6 packages
Support for installing RPM v3 packages has been removed (#1107)
By default, RPM no longer verifies obsolete crypto (MD5, SHA1, DSA) (#1292)
Man page overhaul (work in progress as of 6.0 alpha)
Pristine and verifiable release tarballs (#3565) (#2702)