diff --git a/suse-build-key.changes b/suse-build-key.changes
index 1b794a7..8cde6b4 100644
--- a/suse-build-key.changes
+++ b/suse-build-key.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Jun  2 15:45:33 CEST 2008 - ro@suse.de
+
+- update keys again: for collaboration with rpm, the current
+  self-signature needs to be the first signature found in a key 
+
 -------------------------------------------------------------------
 Mon May  5 18:31:20 CEST 2008 - ro@suse.de
 
diff --git a/suse-build-key.gpg b/suse-build-key.gpg
index 052a93b..c1b21de 100644
Binary files a/suse-build-key.gpg and b/suse-build-key.gpg differ
diff --git a/suse-build-key.spec b/suse-build-key.spec
index 0a6260b..63335e3 100644
--- a/suse-build-key.spec
+++ b/suse-build-key.spec
@@ -20,7 +20,7 @@ Requires:       gpg
 AutoReqProv:    off
 Summary:        The public gpg key for rpm package signature verification
 Version:        1.0
-Release:        843
+Release:        852
 Source0:        suse-build-key.gpg
 Source1:        dumpsigs
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
@@ -114,6 +114,9 @@ fi
 chmod 600 root/.gnupg/pubring.gpg
 
 %changelog
+* Mon Jun 02 2008 ro@suse.de
+- update keys again: for collaboration with rpm, the current
+  self-signature needs to be the first signature found in a key
 * Mon May 05 2008 ro@suse.de
 - updated keys
   9C800ACA,8495160C,307E3D54: extend expiration by 2 years