diff --git a/SOURCES/brasero-3.12.2-default-checksum.patch b/SOURCES/brasero-3.12.2-default-checksum.patch
new file mode 100644
index 0000000..e1be5b5
--- /dev/null
+++ b/SOURCES/brasero-3.12.2-default-checksum.patch
@@ -0,0 +1,31 @@
+From 9c25c3c501a85220701d2b377f609e15ac11b829 Mon Sep 17 00:00:00 2001
+From: David King <amigadave@amigadave.com>
+Date: Tue, 19 Oct 2021 10:04:07 +0100
+Subject: [PATCH] checksum: Default to SHA256 rather than MD5
+
+---
+ data/org.gnome.brasero.gschema.xml | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/data/org.gnome.brasero.gschema.xml b/data/org.gnome.brasero.gschema.xml
+index 4bad20b0..2359bc7f 100644
+--- a/data/org.gnome.brasero.gschema.xml
++++ b/data/org.gnome.brasero.gschema.xml
+@@ -12,12 +12,12 @@
+   </schema>
+   <schema id="org.gnome.brasero.config" path="/org/gnome/brasero/config/">
+     <key name="checksum-image" type="i">
+-      <default>0</default>
++      <default>2</default>
+       <summary>The type of checksum used for images</summary>
+       <description>Set to 0 for MD5, 1 for SHA1 and 2 for SHA256</description>
+     </key>
+     <key name="checksum-files" type="i">
+-      <default>0</default>
++      <default>2</default>
+       <summary>The type of checksum used for files</summary>
+       <description>Set to 0 for MD5, 1 for SHA1 and 2 for SHA256</description>
+     </key>
+-- 
+GitLab
+
diff --git a/SPECS/brasero.spec b/SPECS/brasero.spec
index 008141b..d08618f 100644
--- a/SPECS/brasero.spec
+++ b/SPECS/brasero.spec
@@ -12,7 +12,7 @@
 
 Name:      brasero
 Version:   3.12.2
-Release:   18%{?dist}
+Release:   19%{?dist}
 Summary:   Gnome CD/DVD burning application
 
 
@@ -23,6 +23,8 @@ Source0:   https://download.gnome.org/sources/brasero/%{basever}/brasero-%{versi
 
 # https://gitlab.gnome.org/GNOME/brasero/-/merge_requests/10
 Patch0:    tracker3.patch
+# https://bugzilla.redhat.com/show_bug.cgi?id=1935460
+Patch1:    brasero-3.12.2-default-checksum.patch
 
 # For patch0
 BuildRequires:  autoconf automake
@@ -174,6 +176,9 @@ desktop-file-validate %{buildroot}%{_datadir}/applications/*.desktop
 
 
 %changelog
+* Mon Nov 29 2021 David King <amigadave@amigadave.com> - 3.12.2-19
+- Improve default checksum hash algorithm (#1935460)
+
 * Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 3.12.2-18
 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
   Related: rhbz#1991688