The Red Hat QCI QE team reports: The kickstart file used to deploy RHEL includes a configuration that forces MD5 passwords.
Acknowledgments: Name: Red Hat QCI QE team
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2016-6340