Axel Thimm skrev:
Sorry for jumping in that late, but assuming a malicious deltarpm that could fake a matching md5 sum to pass validation, wouldn't it get applied and make that a security issue?
I assume that deltarpms are (required to be) signed just like full rpms. /abo -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list