From: Kenneth P. <sh...@se...> - 2009-06-25 17:51:47
|
--On Thursday, June 25, 2009 7:06 PM +0100 "Keith G. Robertson-Turner" <dum...@sl...> wrote: > Yes, as of version 4.7, RPM now uses SHA1 checksums instead of MD5, > therefore older versions of RPM trying to verify packages built with > the new version, will fail with the above error. > > http://rpm.org/wiki/Releases/4.7.0 Is it safe to upgrade to that on a RHEL/CentOS 5.3 system? Seems like that would be the easiest way to deal with the problem long-term. Will the newer RPM deal ok with packages from the older repos? Will yum get along with it? I went with CentOS instead of staying with Fedora because I didn't want to have to upgrade the whole OS every 6 months, just critical packages (including dump). I prefer to space the giant upgrades out to be every few years, and RHEL/CentOS has a very long service cycle. For critical packages where I want the latest upstream features and bug fixes, I grab the source package from Rawhide (Red Hat development repo) and rebuild it to create a distro-specific binary package. |