diff --git a/redhat-rpm-config-9.0.3-F-11-StrongerHashes.patch b/redhat-rpm-config-9.0.3-F-11-StrongerHashes.patch
new file mode 100644
index 0000000..24ab9b8
--- /dev/null
+++ b/redhat-rpm-config-9.0.3-F-11-StrongerHashes.patch
@@ -0,0 +1,14 @@
+diff -urNp redhat-rpm-config-9.0.3_orig/macros redhat-rpm-config-9.0.3/macros
+--- redhat-rpm-config-9.0.3_orig/macros	2009-02-23 12:40:33.000000000 -0500
++++ redhat-rpm-config-9.0.3/macros	2009-02-23 12:47:04.000000000 -0500
+@@ -158,6 +158,10 @@ unset DISPLAY\
+ # Should unpackaged files in a build root terminate a build?
+ %_unpackaged_files_terminate_build    1
+ 
++# Use SHA-256 for FILEDIGESTS instead of default MD5
++%_source_filedigest_algorithm 8
++%_binary_filedigest_algorithm 8
++
+ %__find_provides        /usr/lib/rpm/redhat/find-provides
+ %__find_requires        /usr/lib/rpm/redhat/find-requires
+ 
diff --git a/redhat-rpm-config.spec b/redhat-rpm-config.spec
index 174d999..9e8acf6 100644
--- a/redhat-rpm-config.spec
+++ b/redhat-rpm-config.spec
@@ -1,7 +1,7 @@
 Summary: Red Hat specific rpm configuration files.
 Name: redhat-rpm-config
 Version: 9.0.3
-Release: 6%{?dist}
+Release: 7%{?dist}
 # No version specified.
 License: GPL+
 Group: Development/System
@@ -9,6 +9,7 @@ Source: redhat-rpm-config-%{version}.tar.bz2
 Patch0: redhat-rpm-config-9.0.3-fix-requires.patch
 Patch1: limit-smp-16-threads.patch
 Patch2: redhat-rpm-config-9.0.3-F-11-Architectures.patch
+Patch3: redhat-rpm-config-9.0.3-F-11-StrongerHashes.patch
 BuildArch: noarch
 Requires: mktemp
 BuildRoot: %{_tmppath}/%{name}-root
@@ -21,6 +22,7 @@ Red Hat specific rpm configuration files.
 %patch0 -p0
 %patch1 -p1
 %patch2 -p1
+%patch3 -p1
 
 %install
 make DESTDIR=${RPM_BUILD_ROOT} install
@@ -33,6 +35,10 @@ rm -rf ${RPM_BUILD_ROOT}
 %{_prefix}/lib/rpm/redhat
 
 %changelog
+* Mon Feb 23 2009 Jon Masters <jcm@redhat.com> - 9.0.3-7
+- Change default hashing algorithm in file digests to SHA-256
+- Resolves: #485826.
+
 * Tue Feb 17 2009 Dennis Gilmore <dennis@ausil.us> - 9.0.3-6
 - add missing armv7l arch  
 - set the default build arch to match fedora arm build target